Robin Ward 629bb8adf2 SECURITY: XSS with title selector on preferences page ...

Note this is very low severity as the group needs to be created with a
default title that contains HTML, and group creation is restricted to
staff members right now.

2019-07-09 15:49:24 -04:00

..

admin

FIX: Clear theme editor content on switching tabs

2019-07-08 20:06:56 -04:00

discourse

SECURITY: XSS with title selector on preferences page

2019-07-09 15:49:24 -04:00

discourse-common

Update theme component URL

2019-06-04 10:04:27 -04:00

docs

…

ember-addons

DEV: unpin Prettier version, apply to YAML files

2019-01-17 13:05:39 -05:00

locales

FEATURE: Add Belarusian language

2019-07-04 11:37:37 +02:00

pretty-text

FEATURE: Add base62 sha1 to cooked data attribute

2019-06-11 11:15:45 +10:00

select-kit

DEV: prettier 1.18.2 (#7810)

2019-06-26 17:09:52 +02:00

wizard

Update UI for wizard themes further reading step (#7669)

2019-06-03 10:47:17 -04:00

activate-account.js.no-module.es6

CSP - extract all other inline JavaScripts (#6528)

2018-10-25 09:52:01 -04:00

admin.js.erb

…

application.js

SECURITY: updates lodash from 1.3.0 to 4.17.5 (#7546)

2019-05-16 10:34:19 +02:00

auto-redirect.js.no-module.es6

CSP - extract all other inline JavaScripts (#6528)

2018-10-25 09:52:01 -04:00

deprecated.js

…

discourse-loader.js

DEV: enable no-alert & no-console eslint rules

2018-11-14 23:17:56 +01:00

discourse-objects.js

…

discourse.js.es6

DEV: global s/this.get\("(\w+)"\)/this.$1 (#7592)

2019-05-27 10:15:39 +02:00

embed-application.js.no-module.es6

Extract inline JS on embedded comments (#6645)

2018-11-22 10:02:58 -05:00

ember_include.js.erb

…

ember_jquery.js

DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808)

2019-01-10 11:06:01 +01:00

ember-shim.js

…

env.js

FIX: attempts to fix an error with EXTEND_PROTOTYPES (#7067)

2019-02-26 11:04:05 +01:00

google-tag-manager.js.no-module.es6

DEV: transpile certain ES6 files without producing a module (#6460)

2018-10-09 09:18:23 +08:00

google-universal-analytics.js.no-module.es6

DEV: transpile certain ES6 files without producing a module (#6460)

2018-10-09 09:18:23 +08:00

main_include_admin.js

…

markdown-it-bundle.js

FEATURE: Support [description|attachment](upload://<short-sha>) in MD take 2.

2019-05-29 09:26:32 +08:00

omniauth-complete.js.no-module.es6

FIX: stricter window.opener checks (#6578)

2018-11-13 09:56:31 +11:00

onpopstate-handler.js.no-module.es6

extract inline onpopstate handler on 404 page (#6613)

2018-11-15 13:35:38 -05:00

plugin-third-party.js.erb

…

plugin.js.erb

…

polyfills.js

DEV: removes DOMTokenList polyfill (#7831)

2019-07-01 14:08:38 +02:00

preload-application-data.js.no-module.es6

Upgrade to FontAwesome 5 (take two) (#6673)

2018-11-26 16:49:57 -05:00

preload-store.js.es6

DEV: s/Em/Ember (#6874)

2019-01-11 17:54:23 +01:00

pretty-text-bundle.js

FIX: Composer preview not caching inline onebox.

2019-06-11 09:14:53 +08:00

print-page.js

CSP - extract all other inline JavaScripts (#6528)

2018-10-25 09:52:01 -04:00

service-worker.js.erb

FEATURE: special offline support restricted to Android only

2018-10-29 16:29:19 +11:00

set-prototype-polyfill.js

DEV: upgrades from Ember 2.13 to Ember 3.5.1 (#6808)

2019-01-10 11:06:01 +01:00

template_include.js.erb

…

vendor.js

DEV: Remove HTML parser from Tautologistics. (#7344)

2019-04-10 11:21:22 +02:00

wizard-application.js

FIX: Wizard didn't load translations correctly

2018-09-05 15:14:09 +02:00

wizard-start.js.no-module.es6

CSP - extract all other inline JavaScripts (#6528)

2018-10-25 09:52:01 -04:00

wizard-vendor.js

FEATURE: replaces tag-chooser/tag-group-chooser with select-kit component

2018-02-26 11:42:57 +01:00