Guo Xiang Tan 68300f515c FIX: Return 404 if id is not valid.

2017-01-06 10:39:44 +08:00

..

admin

Remove unused email templates from controller

2017-01-05 15:31:14 +01:00

users

FIX: redirects back to origin for SSO and omniauth login

2016-09-16 13:48:50 +10:00

about_controller.rb

…

application_controller.rb

SECURITY: prevent reuse of password reset

2016-12-19 18:00:22 +11:00

badges_controller.rb

Advanced Search UI

2016-10-04 11:18:01 -04:00

categories_controller.rb

Merge pull request #4609 from joebuhlig/category-topics-wiki

2016-12-20 09:15:51 +11:00

category_hashtags_controller.rb

…

clicks_controller.rb

…

composer_messages_controller.rb

…

directory_items_controller.rb

PERF: Remove ordering by username.

2016-10-15 01:13:58 +08:00

draft_controller.rb

…

email_controller.rb

User interface for watching first post

2016-07-07 11:21:50 -04:00

embed_controller.rb

Better error messages when embedding fails

2016-12-13 14:38:05 -05:00

exceptions_controller.rb

…

export_csv_controller.rb

…

extra_locales_controller.rb

FIX: Ensure that translations bundle exists before merging plugin bundle.

2016-09-30 14:29:30 +08:00

finish_installation_controller.rb

FIX: Show an error page if finish-installation can't run

2016-12-07 11:10:08 -05:00

forums_controller.rb

Delete useless home_redirect method from ForumsController.

2016-10-27 15:45:22 +01:00

groups_controller.rb

FIX: Only send membership request to the last 5 active group owners.

2017-01-03 15:33:57 +08:00

highlight_js_controller.rb

…

invites_controller.rb

FIX: simplify CSV file upload

2016-12-05 14:09:08 +05:30

list_controller.rb

FIX: Add tags to list options from params

2016-11-26 08:24:52 -06:00

metadata_controller.rb

FEATURE: Opt-in native Discourse app install banner on Android/iOS

2017-01-03 15:50:45 -02:00

notifications_controller.rb

FEATURE: clean API method for reading a single notification

2016-09-16 16:14:15 +10:00

onebox_controller.rb

FIX: prevent DDoS with lots of _oneboxable_ links

2016-12-20 00:31:10 +01:00

permalinks_controller.rb

…

post_action_users_controller.rb

…

post_actions_controller.rb

FIX: Return 404 if id is not valid.

2017-01-06 10:39:44 +08:00

posts_controller.rb

SECURITY: don't grant same privileges to user_api and api access

2016-12-16 12:05:43 +11:00

queued_posts_controller.rb

…

robots_txt_controller.rb

…

safe_mode_controller.rb

FIX: Incorrect path for redirect.

2016-12-19 18:12:15 +08:00

search_controller.rb

…

session_controller.rb

FEATURE: rate limit by login on password reset

2016-12-19 11:03:07 +11:00

similar_topics_controller.rb

…

site_controller.rb

FEATURE: basic info route for all sites, even ones that require login

2016-08-12 17:10:35 +10:00

site_customizations_controller.rb

…

static_controller.rb

FIX: on 404 from brotli asset path return a correctly encoded doc

2016-12-15 16:05:20 +11:00

steps_controller.rb

FIX: You should be an admin to do the wizard

2016-09-22 11:12:51 -04:00

stylesheets_controller.rb

…

tag_groups_controller.rb

PERF: tag groups index query

2016-07-15 17:16:26 -04:00

tags_controller.rb

FIX: tags canonical url can raise error or be wrong

2017-01-05 15:17:23 -05:00

topics_controller.rb

SECURITY: Users can only bookmark posts which they can see.

2016-12-21 12:01:26 +08:00

uploads_controller.rb

SECURITY: protect upload params, only allow very strict filenames

2016-12-19 10:16:18 +11:00

user_actions_controller.rb

got to be careful with integrity specs

2016-11-29 18:01:09 +11:00

user_api_keys_controller.rb

FEATURE: user API now contains scopes so permission is granular

2016-10-14 16:05:42 +11:00

user_avatars_controller.rb

SECURITY: limit route access when using external avatars

2016-07-28 09:00:43 +10:00

user_badges_controller.rb

…

users_controller.rb

UX: Display group fullname in mention autocomplete.

2017-01-04 11:40:14 +08:00

users_email_controller.rb

…

webhooks_controller.rb

FIX: use metadata to hold the message_id with sparkpost

2016-10-27 19:35:50 +02:00

wizard_controller.rb

FIX: You should be an admin to do the wizard

2016-09-22 11:12:51 -04:00