dbarbera 9106596a9a add image authorization on upload_avatar

2013-10-12 14:11:44 +02:00

..

admin

Add ability to customize css and header for mobile

2013-09-16 12:28:02 -04:00

users

Fix missing provider param message when using Persona

2013-09-23 09:46:25 -07:00

application_controller.rb

require dependency was leading to errors in dev

2013-10-09 17:22:41 +11:00

categories_controller.rb

Add site setting site_description. If filled, it will be used in meta description tag for teh white hat SEO

2013-09-11 15:33:27 -04:00

clicks_controller.rb

Don't redirect to arbitrary URLs via link tracker

2013-07-26 12:14:11 -04:00

composer_messages_controller.rb

New User Education goes through a server side ComposerMessages check. Composer message for users

2013-09-13 12:23:53 -04:00

draft_controller.rb

drafts were saving but client was failing to parse

2013-09-11 16:18:46 +10:00

email_controller.rb

enforce coding convention

2013-03-05 01:42:44 +01:00

exceptions_controller.rb

404 page had horrible perf, it was using "take" instead of limit.

2013-10-02 13:05:03 +10:00

forums_controller.rb

Remove the access_password site setting

2013-06-25 15:05:25 -04:00

invites_controller.rb

Add deleted_by to Trashable tables

2013-07-09 15:46:36 -04:00

list_controller.rb

add rss links to anonymous homepages

2013-10-11 18:43:29 +02:00

notifications_controller.rb

Remove some calls to all. They are not required, and Rails4 raises warnings about them.

2013-07-22 20:44:11 +02:00

onebox_controller.rb

Fixes regression with video embeds

2013-03-21 20:53:12 -04:00

post_actions_controller.rb

FIX: Don't select columns if we don't have to.

2013-08-14 12:18:54 -04:00

posts_controller.rb

FIX: deleting a flagged post issue

2013-10-02 16:59:57 +02:00

robots_txt_controller.rb

Remove the access_password site setting

2013-06-25 15:05:25 -04:00

search_controller.rb

FIX: Search wasn't using the lowercase username for finding the context.

2013-06-10 10:42:06 -04:00

session_controller.rb

add current_user_provider so people can override current_user bevior cleanly, see

2013-10-09 15:11:54 +11:00

static_controller.rb

FIX: BAD CSRF on login. Don't check csrf in the fake login form since it doesn't actually do anything.

2013-08-27 11:31:14 -04:00

topics_controller.rb

When creating a topic, don't select a category by default when allow_uncategorized_topics is false. Also, added category validation on the server to enforce allow_uncategorized_topics.

2013-10-08 14:41:20 -04:00

uploads_controller.rb

proper content-disposition header when downloading attachments

2013-09-06 19:23:56 +02:00

user_actions_controller.rb

FIX: Prevent unauthorized list of private message titles. Also remove some unused code.

2013-09-30 14:35:11 -04:00

users_controller.rb

add image authorization on upload_avatar

2013-10-12 14:11:44 +02:00