Sam 15b5fddd49 SECURITY: protect upload params, only allow very strict filenames

2016-12-19 10:16:18 +11:00

..

admin

FEATURE: Add Group#full_name.

2016-12-13 16:16:26 +08:00

users

…

about_controller.rb

…

application_controller.rb

SECURITY: don't grant same privileges to user_api and api access

2016-12-16 12:05:43 +11:00

badges_controller.rb

…

categories_controller.rb

FIX: Associate category logo and background to uploads record.

2016-12-12 17:37:28 +08:00

category_hashtags_controller.rb

…

clicks_controller.rb

…

composer_messages_controller.rb

…

directory_items_controller.rb

…

draft_controller.rb

…

email_controller.rb

…

embed_controller.rb

Better error messages when embedding fails

2016-12-13 14:38:05 -05:00

exceptions_controller.rb

…

export_csv_controller.rb

…

extra_locales_controller.rb

…

finish_installation_controller.rb

FIX: Show an error page if finish-installation can't run

2016-12-07 11:10:08 -05:00

forums_controller.rb

Delete useless home_redirect method from ForumsController.

2016-10-27 15:45:22 +01:00

groups_controller.rb

FEATURE: Add groups page.

2016-12-14 17:27:47 +08:00

highlight_js_controller.rb

…

invites_controller.rb

FIX: simplify CSV file upload

2016-12-05 14:09:08 +05:30

list_controller.rb

FIX: Add tags to list options from params

2016-11-26 08:24:52 -06:00

metadata_controller.rb

…

notifications_controller.rb

…

onebox_controller.rb

…

permalinks_controller.rb

…

post_action_users_controller.rb

…

post_actions_controller.rb

…

posts_controller.rb

SECURITY: don't grant same privileges to user_api and api access

2016-12-16 12:05:43 +11:00

queued_posts_controller.rb

…

robots_txt_controller.rb

…

safe_mode_controller.rb

FEATURE: Add basic support for Safe Mode

2016-11-21 16:46:14 +11:00

search_controller.rb

…

session_controller.rb

FEATURE: setting to allow arbitrary redirects from sso origin

2016-12-16 13:37:44 +11:00

similar_topics_controller.rb

…

site_controller.rb

…

site_customizations_controller.rb

…

static_controller.rb

FIX: on 404 from brotli asset path return a correctly encoded doc

2016-12-15 16:05:20 +11:00

steps_controller.rb

…

stylesheets_controller.rb

…

tag_groups_controller.rb

…

tags_controller.rb

FIX: topic list filters for bookmarked, posted, and read now work with tag filter

2016-12-02 15:58:14 -05:00

topics_controller.rb

FIX: regression unable to dismiss unread

2016-12-06 08:49:40 +11:00

uploads_controller.rb

SECURITY: protect upload params, only allow very strict filenames

2016-12-19 10:16:18 +11:00

user_actions_controller.rb

got to be careful with integrity specs

2016-11-29 18:01:09 +11:00

user_api_keys_controller.rb

…

user_avatars_controller.rb

…

user_badges_controller.rb

…

users_controller.rb

FIX: whisper no longer experimental

2016-12-02 17:03:31 +11:00

users_email_controller.rb

…

webhooks_controller.rb

FIX: use metadata to hold the message_id with sparkpost

2016-10-27 19:35:50 +02:00

wizard_controller.rb

…