88b5e78424
Merge branch 'add_custom_embed_by_username' of github.com:justinleveck/discourse into justinleveck-add_custom_embed_by_username
...
Conflicts:
config/site_settings.yml
2014-06-16 10:52:15 -04:00
5ea1b0742f
Fix typo in XSS test
2014-06-16 08:40:19 +05:30
944cda1f73
BUGFIX: do not strip spaces from raw_hash of posts
2014-06-16 12:14:06 +10:00
fbbe9f7a19
collapse tests to improve perf of suite
2014-06-16 12:13:28 +10:00
d65efe7304
SECURITY: fix XSS
2014-06-16 10:24:54 +10:00
6e698315d6
Allow all /my URLs
...
Previously, URLs like /my/activity/posts were denied. This change allows those URLs.
2014-06-14 10:58:20 -07:00
a1482f24d9
remove borked test
2014-06-13 17:03:45 -07:00
679b3fab79
correct broken test, List-ID is correct
...
see http://www.ietf.org/rfc/rfc2919.txt
2014-06-13 16:45:34 -07:00
beaa145572
some email notification header fixes
2014-06-13 15:42:20 -07:00
c690fa0d19
FIX: Replace protocol relative URLs in emails
2014-06-13 17:11:04 -04:00
9ffd173873
move bio to UserProfile from User
2014-06-13 14:55:32 -04:00
ba65aa3f6c
Add a way to validate min and max value of an integer site setting
2014-06-12 18:04:37 -04:00
76166567fb
Use the cheap Defer queue as opposed to sidekiq for view tracking.
2014-06-12 11:29:29 +10:00
9611a1ac47
Validate username site settings
2014-06-11 16:20:57 -04:00
ce732d2252
FEATURE: new "disable_edit_notifications" site setting
...
Should be used whenever you activate the "download_remote_images_to_local" site setting to prevent users from receiving a lot of edit notifications from the system user.
2014-06-11 17:14:00 +02:00
03087679f0
FEATURE: Support custom preferences for users, injected by plugins
2014-06-11 15:50:37 +10:00
d13d4fc158
correct state leak
2014-06-11 12:00:02 +10:00
62abb873df
FEATURE: support serializing user custom fields by plugins
2014-06-11 11:57:22 +10:00
0781531e3c
Merge pull request #2415 from techAPJ/bulk-invite-users-5
...
FEATURE: Bulk Invite
2014-06-10 19:11:11 +02:00
a044e3de58
Remove min_posts_for_search_in_topic
...
no longer needed, we always search in topic
2014-06-10 15:07:38 +10:00
8b32fb5b6d
Corrected typo, corrected accidental tab, removed unnecessary database rollback
...
Corrected it "do send" to it "does send"
Removed unnecessary user.update_column (rollback happens automatically)
Replaced Tab with spaces.
2014-06-10 11:36:20 +08:00
c61462662b
Add ability to run validation on site settings. notification_email and other email address settings are now validated.
2014-06-09 16:59:20 -04:00
a78df3d57d
Add custom embed_by_username feature
...
Feature to allow each imported post to be created using a different discourse
username. A possible use case of this is a multi-author blog where discourse
is being used to track comments. This feature allows authors to receive
updates when someone leaves a comment on one of their articles because each of
the imported posts can be created using the discourse username of the author.
2014-06-09 12:35:38 -07:00
faed17aa18
Moderators should always be able to create topics too
2014-06-09 15:28:03 -04:00
f97d434174
Fix the spec for enum site settings
2014-06-09 15:28:03 -04:00
c176dc07c1
Merge pull request #2421 from peternlewis/reply_to_name
...
Use an appropriate name in the Reply-To header
2014-06-09 11:04:53 -04:00
4d50d0d109
FIX: admins should be able to create topics, even if min_trust_to_create_topic is higher than their trust level
2014-06-09 11:03:21 -04:00
87e254cc3a
Added test to ensure email is sent to users with email_always set even if the notification has been read
2014-06-09 19:09:36 +08:00
93f5f98b58
Corrected and added appropriate specs to confirm correct behaviour.
...
Tests ensure that the site name is used for public replies and the username is used for private replies.
2014-06-09 18:26:19 +08:00
727184641e
FEATURE: Bulk Invite
2014-06-09 01:43:39 +05:30
0a42901c40
do not use try in UserSerializer for fields coming from UserProfile
2014-06-07 13:30:35 -07:00
7db31adf35
move website from User to UserProfile
2014-06-06 21:54:32 -07:00
05ca1e6e46
Added code block normalization routing for import
2014-06-06 10:34:21 +10:00
0df666277d
BUGFIXES: properly deal with bookmarks and deleted posts
...
BUGFIX: removing a bookmark from the activity feed was busted for deleted posts
BUGFIX: delete associated user actions when deleting a post
2014-06-04 17:41:11 +02:00
e307bad89a
One less TODO makes me on little bit more happy
2014-06-04 14:10:54 +10:00
c6c412fd45
BUGFIX: no reading credit for posts you create
2014-06-04 14:10:54 +10:00
3e16ac62c3
Add register_color_scheme for plugins
2014-06-03 12:37:29 -04:00
3405253405
FEATURE: rush posting read times for newly read posts
...
FEATURE: "read" indicator on posts
CHANGE: anon is now assumed to have read everything
2014-06-03 11:48:52 +10:00
e087e37907
BUGFIX: blank name causes SSO to explode
2014-06-02 17:32:39 +10:00
0979e7b9af
BUGFIX: tracking categories was not implemented
2014-06-02 13:55:01 +10:00
106838b92b
Correct invalid spec
2014-05-30 14:48:07 +10:00
95221ee9c1
rebake based on version, not date
2014-05-30 14:45:55 +10:00
fa6f22dd39
Move letter avatars out of upload system
...
FIX: S3 issues around system avatars
FIX: reduced backup file size
2014-05-30 14:45:55 +10:00
fe594f5d1e
Merge pull request #2372 from vikhyat/badge-system
...
Multiple grant badges
2014-05-30 10:18:00 +10:00
e6841d0849
FIX: user avatar urls need to be absolute in wordpress api
2014-05-29 17:19:49 -04:00
2ad756464e
SECURITY: TopicView not correctly restricting to topic
2014-05-29 21:56:26 +10:00
0bc3525b10
BUGFIX: more robust onebox implementation
2014-05-28 17:15:10 +10:00
d9f51961c4
BUGFIX: pick gravatar if it was just downloaded
...
BUGFIX: don't go rebaking unless all avatars are downloaded
2014-05-28 16:54:21 +10:00
f6753d3d46
FEATURE: automatically rebake out-of-date posts
2014-05-28 12:30:57 +10:00
2791852bd8
FEATURE: ability to regenerate system avatars as needed
...
BUGFIX: made system letter avatar more thinner for less block look
2014-05-28 12:30:57 +10:00
7c22d738b6
FEATURE: Add a location field to a user's profile
2014-05-27 13:54:04 -04:00
1e28668e9f
missed one spot where route changed
2014-05-28 01:09:01 +10:00
6e0f54ba9a
slow down the back fill process a bit
2014-05-27 20:46:17 +10:00
330ea82ce4
FIX broken spec
2014-05-27 13:52:39 +10:00
a79bf11edb
Admin badge creation bug fixes.
2014-05-27 09:03:55 +05:30
033cbc61bf
BUGFIX: broken spec
2014-05-27 10:08:03 +10:00
504cfcff96
Fix specs for avatars
...
Implement avatar picker
Correct avatar related jobs
2014-05-27 10:08:03 +10:00
6c1c8be794
Work in progress, keeping avatars locally
...
This introduces a new model to store the avatars and 3 uploads per user (gravatar, system and custom)
user can then pick which they want.
2014-05-27 10:08:03 +10:00
7900c7bd2f
Allow multiple subcategories with the same name
2014-05-26 15:33:51 -04:00
67db561429
BUGFIX: missed a key rename
...
BUGFIX: API spec not enabling CSRF
2014-05-23 08:43:19 +10:00
cf254000cf
Revert "Revert "BUGFIX: improve error messages for invalid API keys""
...
This reverts commit e9afe28586
2014-05-23 08:43:19 +10:00
e9afe28586
Revert "BUGFIX: improve error messages for invalid API keys"
2014-05-22 14:55:36 -04:00
c913c50c68
Remove that spec
2014-05-22 11:14:22 -04:00
d2c34d17b7
Fix failing spec. Stubbing intermittently does not stub...
2014-05-22 11:06:19 -04:00
8f445e835b
FIX broken spec
2014-05-22 09:08:09 +10:00
eeef775f21
BUGFIX: improve error messages for invalid API keys
...
BUGFIX: don't track last seen for message bus
2014-05-22 09:01:29 +10:00
742841ddce
Add Google Oauth2 authenticator. The current Google OpenID authentication has been deprecated by Google and will NOT work for any new websites.
2014-05-21 18:35:10 -04:00
d208e4d517
Multiple grant badges.
2014-05-21 12:54:55 +05:30
64355c989e
FIX: Don't extract links from empty quotes
2014-05-20 17:20:52 -04:00
4d3c19f736
OOPS: fix broken spec
2014-05-20 15:32:42 -04:00
27cbc06563
Add fixed_category_positions site setting to handle whether categories are ordered by specified positions or by activity.
2014-05-16 11:33:52 -04:00
5914d0e132
Merge pull request #2311 from vikhyat/badge-system
...
Add automatically assigned trust level badges
2014-05-16 09:08:00 +10:00
8c2ec4c52a
Get rid of update_badges mocks.
2014-05-15 23:13:04 +05:30
198cf851ff
BUGFIX: exact username match not correctly prioritized on search
2014-05-15 12:22:35 +10:00
3211c60bbe
FEATURE: A new site setting `public_user_custom_fields` which allows you
...
to whitelist custom fields that will be exposed to the Ember client
application.
2014-05-14 14:39:01 -04:00
c07244a4e6
Refactor BadgeGranter.update_trust_level_badges! -> update_badges.
2014-05-14 21:01:41 +05:30
b144b75565
Add automatically assigned trust level badges.
2014-05-14 20:47:21 +05:30
c4d3aa3d47
Theming: a UI to choose some base colors that are applied to all the site css. CSS compiled outside of asset pipeline.
2014-05-14 10:18:12 -04:00
55b37d3948
Let's try another fix for this smoke test
2014-05-13 18:14:01 -04:00
fb23f8f54c
Update smoke_test.js for new user card
2014-05-13 17:45:30 -04:00
08dde3d881
BUGFIX: moderators can notify moderators
2014-05-13 17:47:00 +02:00
6e0eb89697
Don't show suspended users in autocomplete fields unless you are staff
2014-05-13 11:44:15 -04:00
960d64930c
Wiki Post
2014-05-13 08:53:11 -04:00
e68e97d986
FIX: moderators can't see private topics that they aren't invited to see.
2014-05-12 15:26:46 -04:00
fca6738212
BUGFIX: could not see the revisions of a post in a deleted topic
2014-05-12 16:30:10 +02:00
1566693b6e
BUGFIX: do not lightbox oneboxed images
2014-05-12 12:07:05 +02:00
bc3de84ebf
FEATURE: remove bookmark button in activity feed
2014-05-12 09:33:26 +02:00
9125453628
FEATURE: add the first 3 participants in a private message
2014-05-12 09:32:49 +02:00
084ec87850
FEATURE: admins can invite users to groups via the web UI
2014-05-09 18:22:36 +10:00
3f07c1d0a1
Backend support for group invites
2014-05-09 18:22:35 +10:00
34d1668f9f
FEATURE: backend for inviting a user to a group
2014-05-09 18:22:35 +10:00
ffd18ca0ca
BUGFIX: smoke test regression due to anon button moving
2014-05-08 14:47:54 +10:00
a2e2d0e886
Merge pull request #2316 from mutiny/refactor-where-first
...
Refactor `where(...).first` to `find_by(...)`
2014-05-08 09:10:45 +10:00
21e8ae0eca
BUGFIX: the /top page now shows the first non-empty period
2014-05-07 19:04:39 +02:00
f44bd4ec28
Don't allow sending private messages to suspended users. Emails to suspended users should tell them how to respond, since they can't.
2014-05-06 15:01:27 -04:00
1574485443
Perform the where(...).first to find_by(...) refactoring.
...
This refactoring was automated using the command: bundle exec "ruby refactorings/where_dot_first_to_find_by/app.rb"
2014-05-06 14:41:59 +01:00
c21d3f41d0
BUGFIX: only redirect new users to top page once
...
Actually, new users will still be redirected to the top page during the first 30 seconds of their first visit.
2014-05-05 19:00:40 +02:00
014bfc0512
Use 10k most common passwords instead of 5k
2014-05-02 12:01:21 -04:00
dc0a758ec6
FIX: quote whole post button was broken
2014-04-30 14:21:43 -04:00
11af466737
FEATURE: add a specific flag reason when a post has been hidden
2014-04-30 16:58:01 +02:00
Robin Ward
Arpit Jalan
Sam Saffron
riking
Jeff Atwood
Andrew Bezzub
Neil Lalonde
Régis Hanol
Peter N Lewis
Justin Leveck
Vikhyat Korrapati
Wojciech Zawistowski
Louis Rose