Alan Guo Xiang Tan 115859964d SECURITY: Validate email constraints when trying to redeem an invite ...

In certain situations, a logged in user can redeem an invite with an email that
either doesn't match the invite's email or does not adhere to the email domain
restriction of an invite link. The impact of this flaw is aggrevated
when the invite has been configured to add the user that accepts the
invite into restricted groups.

2022-06-21 11:32:27 +01:00

..

admin

FIX: Show suspended by user (#16927)

2022-06-01 14:54:23 +02:00

api

DEV: Fix flakey site.json rswag specs (#17161)

2022-06-20 12:33:33 -06:00

about_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

application_controller_spec.rb

SECURITY: banner-info (#17071)

2022-06-13 11:10:21 -06:00

associate_accounts_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

badges_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

bookmarks_controller_spec.rb

FEATURE: Promote polymorphic bookmarks to default and migrate (#16729)

2022-05-23 10:07:15 +10:00

bootstrap_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

categories_controller_spec.rb

FEATURE: Introduce site setting to allow for non staff pm tagging (#16671)

2022-05-10 10:02:28 -05:00

clicks_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

composer_messages_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

csp_reports_controller_spec.rb

FIX: stop logging blank and invalid CSP reports (#17144)

2022-06-20 16:57:46 +10:00

directory_columns_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

directory_items_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

do_not_disturb_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

drafts_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

email_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

embed_controller_spec.rb

FEATURE: Block indexing the embed topic list (#16495)

2022-04-19 18:24:38 -03:00

exceptions_controller_spec.rb

FEATURE: Add page title to 404 pages (#16846)

2022-05-17 18:37:43 +03:00

export_csv_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

extra_locales_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

finish_installation_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

forums_controller_spec.rb

DEV: New readonly mode. Only applies to non-staff (#16243)

2022-05-17 13:06:08 -05:00

groups_controller_spec.rb

FEATURE: Introduce site setting to allow for non staff pm tagging (#16671)

2022-05-10 10:02:28 -05:00

hashtags_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

inline_onebox_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

invites_controller_spec.rb

SECURITY: Validate email constraints when trying to redeem an invite

2022-06-21 11:32:27 +01:00

list_controller_spec.rb

FIX: Harmonise category body class generation on server/client (#16967)

2022-06-01 18:18:20 +01:00

metadata_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

notifications_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

offline_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

omniauth_callbacks_controller_spec.rb

DEV: New readonly mode. Only applies to non-staff (#16243)

2022-05-17 13:06:08 -05:00

onebox_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

permalinks_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

post_action_users_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

post_actions_controller_spec.rb

DEV: Remove PostAction/UserAction bookmark refs (#16681)

2022-05-10 10:42:18 +10:00

post_readers_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

posts_controller_spec.rb

FEATURE: Promote polymorphic bookmarks to default and migrate (#16729)

2022-05-23 10:07:15 +10:00

presence_controller_spec.rb

FIX: Ensure presence endpoints don't break the session (#17108)

2022-06-16 14:38:43 +01:00

published_pages_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

push_notification_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

qunit_controller_spec.rb

DEV: Remove ember-cli flags from the backend (#17147)

2022-06-20 16:33:05 +02:00

reviewable_claimed_topics_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

reviewables_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

robots_txt_controller_spec.rb

FEATURE: Let sites add a sitemap.xml file. (#16357)

2022-04-12 10:33:59 -03:00

safe_mode_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

search_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

session_controller_spec.rb

FIX: DiscourseConnect login did not auto approve based on email domain (#17006)

2022-06-06 15:16:01 +08:00

similar_topics_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

site_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

sitemap_controller_spec.rb

FIX: Return a 404 when a sitemap request doesn't have a format (#16506)

2022-04-19 11:07:25 -03:00

static_controller_spec.rb

DEV: Ensure service-worker sourcemap logic works with brotli/gzip (#16718)

2022-05-11 13:42:34 +01:00

steps_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

stylesheets_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

svg_sprite_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

tag_groups_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

tags_controller_spec.rb

FIX: Remove tags from experimental sidebar on notification level changed (#17083)

2022-06-14 15:39:56 +08:00

theme_javascripts_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

topics_controller_spec.rb

DEV: Remove ember-cli flags from the backend (#17147)

2022-06-20 16:33:05 +02:00

uploads_controller_multisite_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

uploads_controller_spec.rb

FEATURE: Make S3 presigned GET URL expiry configurable (#16912)

2022-05-26 09:53:01 +10:00

user_actions_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

user_api_keys_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

user_avatars_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

user_badges_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

user_status_controller_spec.rb

Revert "DEV: Centralize user updates to a single MessageBus channel. (#17058)" (#17115)

2022-06-17 12:24:15 +08:00

users_controller_spec.rb

FEATURE: Promote polymorphic bookmarks to default and migrate (#16729)

2022-05-23 10:07:15 +10:00

users_email_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00

webhooks_controller_spec.rb

FIX: Skip CSRF token check on webhook routes (#16982)

2022-06-13 15:36:45 +01:00

wizard_controller_spec.rb

DEV: Automatically require 'rails_helper' in all specs (#16077)

2022-03-01 17:50:50 +00:00