Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
discourse/lib
History
Blake Erickson 5b5b5a5931 FIX: return an error if a user tries to whisper 
This commit fixes a bug where a user creates a whisper post via the api
but is posted as a regular message because they don't have access to
whisper. Now a 403 unauthorized will be returned instead of the whisper
param just being ignored for regular users. Staff users should not be
affected by this change.

https://meta.discourse.org/t/a-whisper-is-posted-as-a-message-if-the-user-is-not-staff-moderator-admin-when-using-the-api/116601
 		2019-05-07 11:42:26 -06:00
..
active_record/connection_adapters FIX: Don't trigger PG failover when running `db:migrate`. 2019-05-06 17:03:28 +08:00
auth DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
autospec DEV: support symlinked plugins in bin/rake autospec 2019-05-03 13:51:07 +10:00
backup_restore FIX: Wrong color palette after backup restore 2019-05-07 17:02:57 +02:00
common_passwords Make rubocop happy again. 2018-06-07 13:28:18 +08:00
content_security_policy FEATURE: Calculate CSP based on active themes (#6976) 2019-02-11 12:32:04 +00:00
demon FEATURE: introduce ultra_low priority queue 2019-01-17 14:53:19 +11:00
email DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
emoji early preview of new emojis (#7486) 2019-05-07 10:49:15 +02:00
es6_module_transpiler DEV: Enable `Style/SingleLineMethods` and `Style/Semicolon` in Rubocop (#6717) 2018-12-04 11:48:13 +08:00
file_store FIX: Error when trying to move the same file to tombstone. 2019-04-24 16:47:36 +08:00
freedom_patches DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
generators REFACTOR: Move `queue_jobs` out of `SiteSetting` 2019-03-14 10:47:38 -04:00
guardian FIX: return an error if a user tries to whisper 2019-05-07 11:42:26 -06:00
highlight_js DEV: already defined constant 'HIGHLIGHTJS_DIR' 2019-01-21 10:12:23 +01:00
i18n REFACTOR: Use keyword argument for fallback_to_english flag 2019-02-19 15:28:47 +01:00
import Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
import_export DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
javascripts DEV: Upgrade our widget handlebars compiler 2019-05-02 15:47:57 -04:00
middleware FEATURE: Optional detailed performance logging for Sidekiq jobs (#7091) 2019-03-05 11:19:11 +00:00
migration FIX: Properly associate user_profiles background urls via upload id. 2019-05-02 14:58:24 +08:00
onebox Upgrade to FontAwesome 5 (take two) (#6673) 2018-11-26 16:49:57 -05:00
plugin DEV: More `send` -> `public_send`. 2019-05-07 10:05:58 +08:00
pretty_text UX: Better emoji escaping for topic title (#7218) 2019-03-21 09:11:33 +01:00
rate_limiter DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
reviewable FIX: Add test to confirm updating category works. 2019-05-01 11:37:28 -04:00
scheduler FEATURE: log long running jobs in the defer queue 2018-10-12 17:03:47 +11:00
search DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
seed_data Fix rebase fail in 152238b4cf. 2019-05-07 09:46:07 +08:00
sidekiq Fix deadblock in 615a22a579. 2019-02-20 10:25:43 +08:00
site_settings DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
stylesheet DEV: avoid using send when we can simply call the method 2019-05-07 16:50:45 +10:00
svg_sprite UX: Replace staff notice icon with user-shield. 2019-04-23 10:37:33 +03:00
tasks PERF: Speed up migrate_to_s3 rake task by deleting optimized image record. 2019-05-07 16:10:32 +08:00
theme_store FEATURE: Show diff of local changes before updating remote theme (#7443) 2019-05-02 21:43:54 -04:00
validators DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
wizard DEV: introduce new API to look up dynamic site setting 2019-05-07 11:00:30 +10:00
admin_confirmation.rb
…
admin_constraint.rb FIX: Don't update `User#last_seen_at` when PG is readonly take 2. 2019-01-21 13:49:08 +08:00
admin_user_index_query.rb DEV: stop mutating inputs as a side effect 2019-04-30 10:25:53 +10:00
age_words.rb
…
archetype.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
auth.rb DEV: Introduce Auth::ManagedAuthenticator 2018-11-30 11:18:11 +00:00
avatar_lookup.rb UX: show full name on /latest page 2018-08-23 14:41:06 +05:30
badge_posts_view_manager.rb Extract `badge_posts` view management logic into a service object. 2018-09-03 09:51:35 +08:00
badge_queries.rb FIX: grant first quote at the date post was created 2019-04-03 16:41:52 +11:00
base62.rb remove constant warning in base62 file 2018-01-19 19:52:42 +01:00
browser_detection.rb UX: detect DiscourseHub user agent in recently used devices 2019-04-16 13:50:47 -04:00
cache.rb FIX: Don't use `Redis#keys` in production. 2018-12-25 15:12:59 +02:00
canonical_url.rb
…
category_badge.rb FIX: avoid using absolute positioning for box category style in emails (#6607) 2018-11-15 14:35:50 +01:00
comment_migration.rb DEV: remove exec_sql and replace with mini_sql 2018-06-19 16:13:36 +10:00
composer_messages_finder.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
configurable_urls.rb
…
content_buffer.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
content_security_policy.rb FEATURE: Calculate CSP based on active themes (#6976) 2019-02-11 12:32:04 +00:00
cooked_post_processor.rb FIX: rescue InvalidURIError when removing user ids from links 2019-04-25 12:36:31 +05:30
crawler_detection.rb FIX: cubot android devices were detected as crawlers 2018-06-21 10:56:46 +10:00
current_user.rb FIX: Do not check for suspicious login when impersonating. (#6534) 2018-11-12 15:34:12 +01:00
custom_renderer.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
custom_setting_providers.rb
…
db_helper.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
directory_helper.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
discourse.rb DEV: Fix missing port in URLs in development mode. 2019-05-06 13:26:57 +08:00
discourse_cookie_store.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
discourse_diff.rb Revert "FIX: When mutating a string to build a diff. Duplicate it first (#7482)" (#7484) 2019-05-07 16:36:23 +10:00
discourse_event.rb Revert "PERF: Call web hook events in a new thread (#7451)" (#7456) 2019-04-29 18:50:34 +10:00
discourse_hub.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
discourse_iife.rb
…
discourse_ip_info.rb FIX: Ensure TarReader is closed. 2019-04-10 13:37:04 +03:00
discourse_logstash_logger.rb FIX: Incorrect formatter used when logstash formatter is enabled. 2018-04-17 12:07:52 +08:00
discourse_plugin.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
discourse_plugin_registry.rb DEV: Yarn-manage moment and moment-timezone libraries 2019-02-12 13:57:52 -05:00
discourse_redis.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
discourse_tagging.rb DEV: Add support for Rails 6 2019-05-02 16:23:25 +10:00
discourse_updates.rb DEV: Fix rubocop after update. 2019-01-02 05:47:29 +08:00
disk_space.rb FEATURE: Improve backup stats on admin dashboard 2018-12-17 11:35:11 +01:00
distributed_cache.rb REFACTOR: distributed_cache is moved to the message_bus gem 2018-10-15 15:01:45 -04:00
distributed_memoizer.rb DEV: Properly flush `DistributedMemoizer` in spec. 2019-02-21 15:17:37 +08:00
distributed_mutex.rb DEV: Prevent warning about already initialized constant 2019-02-28 21:57:20 +01:00
edit_rate_limiter.rb
…
email.rb FEATURE: Include "via <site_name>" in email From header 2019-01-04 17:06:19 +01:00
email_backup_token.rb
…
email_cook.rb replace indentation with non-breaking spaces when cooking emails 2017-11-18 17:16:44 +01:00
email_updater.rb Make rubocop happy again. 2018-06-07 13:28:18 +08:00
encodings.rb Use rchardet instead of charlock_holmes gem 2018-08-01 10:41:20 +02:00
enum.rb
…
enum_site_setting.rb
…
excerpt_parser.rb Revert "FIX: strip spoilers in notification excerpts" 2019-04-15 10:15:17 -04:00
feed_element_installer.rb FEATURE: Replace SimpleRSS with Ruby RSS module (#5311) 2017-12-06 10:45:09 +11:00
feed_item_accessor.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
file_helper.rb PERF: reduce workload when optimizing images 2019-01-09 12:28:18 +11:00
filter_best_posts.rb PERF: Remove `Object#present?` check introduced in e0d5d9670a. 2017-09-07 21:36:27 +08:00
final_destination.rb FIX: GET request didn't use headers 2019-03-08 21:36:49 +01:00
flag_query.rb FEATURE: New 'Reviewable' model to make reviewable items generic 2019-03-28 12:45:10 -04:00
flag_settings.rb FEATURE: New 'Reviewable' model to make reviewable items generic 2019-03-28 12:45:10 -04:00
gaps.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
global_path.rb FIX: Incorrect CDN URL for site setting uploads when s3 is enabled. 2019-01-04 07:52:13 +08:00
guardian.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
has_errors.rb DEV: Add support for Rails 6 2019-05-02 16:23:25 +10:00
headless-ember.js
…
hijack.rb Take 2 of 0f5161af19. 2019-04-29 16:41:35 +08:00
homepage_constraint.rb FIX: Don't update `User#last_seen_at` when PG is readonly take 2. 2019-01-21 13:49:08 +08:00
html_prettify.rb Update Rubocop to 0.60 2018-12-04 10:48:16 +01:00
html_to_markdown.rb FIX: skip <br> inside <p> if next character is \n 2019-04-14 14:44:54 +05:30
image_sizer.rb FIX: raise exception when getting dimensions of missing image 2018-12-03 10:19:49 -05:00
inline_oneboxer.rb FIX: Cache url data for failed inline oneboxes 2018-11-13 01:44:20 +05:30
introduction_updater.rb FEATURE: Locale support for seeded categories and topics (#7110) 2019-03-18 21:09:13 +01:00
ip_addr.rb
…
js_locale_helper.rb DEV: Prevent warnings in specs 2019-04-16 11:41:27 +02:00
json_error.rb FEATURE: Support backup uploads/downloads directly to/from S3. 2018-10-15 09:43:31 +08:00
letter_avatar.rb FIX: don't generate an exception when trying to cleanup unexisting tmp letter avatars 2018-05-30 15:33:58 +02:00
markdown_linker.rb FIX: subfolder digest emails have incorrect URLs 2018-08-07 16:38:17 -04:00
mem_info.rb
…
message_bus_diags.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
method_profiler.rb FEATURE: Optional detailed performance logging for Sidekiq jobs (#7091) 2019-03-05 11:19:11 +00:00
mini_sql_multisite_connection.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
mobile_detection.rb Set input and textarea font size to 16px on iOS (#7480) 2019-05-07 10:44:43 -04:00
new_post_manager.rb DEV: Add support for Rails 6 2019-05-02 16:23:25 +10:00
new_post_result.rb DEV: Add support for Rails 6 2019-05-02 16:23:25 +10:00
notification_levels.rb
…
oneboxer.rb FIX: Onebox discourse user not respecting enable names (#7245) 2019-03-25 12:50:14 +05:30
onpdiff.rb
…
pbkdf2.rb more prep work for jRuby 2018-02-26 10:25:58 +11:00
permalink_constraint.rb
…
pinned_check.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
plain_text_to_markdown.rb FEATURE: convert plain text emails to markdown 2017-12-06 01:47:51 +01:00
plugin_gem.rb Override problematic .gemrc setting 2018-10-17 15:31:58 +11:00
post_action_creator.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
post_action_destroyer.rb FEATURE: New 'Reviewable' model to make reviewable items generic 2019-03-28 12:45:10 -04:00
post_action_result.rb FEATURE: New 'Reviewable' model to make reviewable items generic 2019-03-28 12:45:10 -04:00
post_creator.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
post_destroyer.rb FIX: Close topics deleted by users and ensure topic stubs are destroyed. (#7430) 2019-05-07 16:25:52 +03:00
post_jobs_enqueuer.rb FEATURE: Remove full quotes only from new posts. (#6862) 2019-01-17 13:24:32 +11:00
post_locker.rb FEATURE: Staff members can lock posts 2018-01-26 14:01:30 -05:00
post_merger.rb
…
post_revisor.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
pretty_text.rb FIX: get vimeo URL from `data-original-href` iframe attribute 2019-04-26 17:12:07 +05:30
primary_group_lookup.rb PERF: Remove N+1 query when generating posters summary. 2017-09-14 12:07:35 +08:00
promotion.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
quote_comparer.rb FEATURE: Add `quote-modified` class if a quote has been modified 2018-03-13 13:41:06 -04:00
rate_limiter.rb correct return value 2018-04-25 08:44:07 +10:00
read_only_header.rb DEV: rename ReadOnly module to ReadOnlyHeader 2019-05-06 16:07:49 +02:00
remap.rb FEATURE: Automatically generate optimized site metadata icons (#7372) 2019-05-01 14:44:45 +01:00
retrieve_title.rb Make rubocop happy again. 2018-06-07 13:28:18 +08:00
route_format.rb FEATURE: Add support for Unicode usernames and group names 2019-04-23 13:00:27 +02:00
rtl.rb DEV: Move RTL into lib where it belongs 2017-07-03 15:26:57 -04:00
s3_helper.rb DEV: Remove SiteSetting.s3_force_path_style (#7210) 2019-03-20 14:58:20 +01:00
s3_inventory.rb Fix typo in condition value. 2019-05-07 17:09:08 +05:30
score_calculator.rb PERF: remove avg_time calculations and regular jobs from posts and topics 2019-05-06 15:59:01 +10:00
screening_model.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
search.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
secure_session.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
single_sign_on.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
single_sign_on_provider.rb FIX: move sso provider into its own class so it doesn't interfere with sso client (#6767) 2018-12-19 10:22:10 +01:00
site_icon_manager.rb DEV: introduce new API to look up dynamic site setting 2019-05-07 11:00:30 +10:00
site_setting_extension.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
slug.rb FIX: Generate ASCII slug with default locale 2019-04-29 18:29:58 +02:00
socket_server.rb Improve error messaging in `SocketServer`. 2018-09-19 09:11:10 +08:00
source_url.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
spam_handler.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
sql_builder.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
staff_constraint.rb FIX: Don't update `User#last_seen_at` when PG is readonly take 2. 2019-01-21 13:49:08 +08:00
staff_message_format.rb More extensibility for custom silence/suspend messages 2018-01-19 11:35:19 -05:00
suggested_topics_builder.rb tweaks to related message list generation 2018-10-29 16:09:58 +11:00
system_message.rb FEATURE: Add site contact group. (#7152) 2019-03-13 11:34:47 +01:00
text_cleaner.rb DEV: stop mutating inputs as a side effect 2019-04-30 10:25:53 +10:00
text_sentinel.rb FIX: skip some checks for CJK locale in TextSentinel (#7322) 2019-04-05 15:07:49 +02:00
theme_javascript_compiler.rb FIX: Prevent duplicate params for raw template theme handlebars helpers 2019-02-08 12:54:00 +00:00
theme_settings_manager.rb FEATURE: Allow string theme settings to display with multiple lines 2019-02-05 14:14:53 +00:00
theme_settings_parser.rb FEATURE: Allow string theme settings to display with multiple lines 2019-02-05 14:14:53 +00:00
theme_translation_manager.rb FEATURE: Support for localized themes (#6848) 2019-01-17 11:46:11 +00:00
theme_translation_parser.rb FIX: Circular argument reference 2019-01-25 17:44:02 +00:00
timeline_lookup.rb PERF: Don't pluck all the columns just to retrieve a single value. 2018-06-27 11:41:35 +08:00
topic_creator.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
topic_list_responder.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
topic_publisher.rb FIX: Missing topic edited web hook when publishing a topic. 2019-04-16 14:28:23 +08:00
topic_query.rb DEV: Prefer `public_send` over `send`. 2019-05-07 09:33:21 +08:00
topic_query_sql.rb DEV: Rails 5.2 upgrade and global gem upgrade 2018-06-07 14:21:33 +10:00
topic_retriever.rb Make rubocop happy again. 2018-06-07 13:28:18 +08:00
topic_subtype.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
topic_view.rb FEATURE: Flag count in post menu 2019-05-06 16:13:31 -04:00
topics_bulk_action.rb DEV: move send => public_send in lib folder 2019-05-07 12:25:44 +10:00
trust_level.rb
…
twitter_api.rb FIX: allow Twitter videos to go fullscreen 2018-07-19 10:22:36 +05:30
unread.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00
upload_creator.rb DEV: Remove unused line of code. 2019-05-02 16:54:10 +08:00
upload_fixer.rb typo in error message 2018-08-10 11:34:01 +10:00
upload_recovery.rb FIX: Properly associate user_profiles background urls via upload id. 2019-05-02 14:58:24 +08:00
url_helper.rb FIX: detect local assets for subfolder installs 2019-04-13 10:35:23 -07:00
user_name_suggester.rb DEV: stop mutating inputs as a side effect 2019-04-30 10:25:53 +10:00
version.rb Version bump to v2.3.0.beta9 2019-04-24 16:22:00 +02:00
wizard.rb Add rubocop to our build. (#5004) 2017-07-28 10:20:09 +09:00