Penar Musaraj 0ab3ba5f0d

SECURITY: strip xlink:href from uploaded SVGs (#21057) ...

This was inadvertently removed in 4c46c7e. In very specific scenarios,
this could be used execute arbitrary JavaScript.

Only affects instances where SVGs are allowed as uploads and CDN is not
configured.

2023-04-11 14:10:44 -04:00

..

fabricators

DEV: Define form template field inputs (#20430)

2023-03-01 11:07:13 -08:00

fixtures

DEV: Allow DROP NOT NULL in pre-deploy migrations (#20775)

2023-03-22 14:43:32 +00:00

helpers

DEV: Replace #pluck_first freedom patch with AR #pick in core (#19893)

2023-02-13 12:39:45 +08:00

import_export

DEV: Apply syntax_tree formatting to spec/*

2023-01-09 11:49:28 +00:00

initializers

DEV: Apply syntax_tree formatting to spec/*

2023-01-09 11:49:28 +00:00

integration

DEV: Update the rubocop setup (#20668)

2023-03-14 11:42:11 +01:00

integrity

DEV: Colocate wizard component templates (#20309)

2023-02-15 11:29:22 +00:00

jobs

FIX: Do not validate email in TL promotion (#20892)

2023-03-30 13:52:10 +10:00

lib

SECURITY: strip xlink:href from uploaded SVGs (#21057)

2023-04-11 14:10:44 -04:00

mailers

DEV: Apply syntax_tree formatting to spec/*

2023-01-09 11:49:28 +00:00

models

FEATURE: Persist password hashing algorithm/params in database (#20980)

2023-04-11 10:16:28 +01:00

multisite

DEV: Add plugin hook for transforming site setting defaults (#20941)

2023-04-05 12:28:16 +01:00

requests

DEV: Support in:<notification level> filter on /filter route (#21038)

2023-04-11 08:48:07 +08:00

script/import_scripts

DEV: Correct syntax_tree violations

2023-02-02 13:03:11 +00:00

serializers

FEATURE: public custom sidebar sections visible to anonymous (#20931)

2023-04-06 08:55:47 +10:00

services

DEV: Fix random typos (#20937)

2023-04-03 19:27:32 +02:00

support

DEV: Introduces a wait_for_animation system spec helper (#20573)

2023-03-08 16:49:20 +01:00

system

FEATURE: public custom sidebar sections visible to anonymous (#20931)

2023-04-06 08:55:47 +10:00

tasks

DEV: Capture output in hashtags spec (#20773)

2023-03-23 11:47:14 +10:00

views

FEATURE: add category name in articleSection meta tag for schema. (#21004)

2023-04-06 23:30:19 +05:30

rails_helper.rb

DEV: Change Bookmarkable registration to DiscoursePluginRegistry (#20556)

2023-03-08 10:39:12 +10:00

regenerate_swagger_docs

DEV: Add API docs for uploads and API doc watcher (#15387)

2021-12-23 08:40:15 +10:00

swagger_helper.rb

DEV: Apply syntax_tree formatting to spec/*

2023-01-09 11:49:28 +00:00