Discource-C
/
discourse
mirror of https://github.com/discourse/discourse.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
discourse/config/initializers
History
Martin Brennan 097851c135
FIX: Change secure media to encompass attachments as well (#9271) 
If the “secure media” site setting is enabled then ALL files uploaded to Discourse (images, video, audio, pdf, txt, zip etc. etc.) will follow the secure media rules. The “prevent anons from downloading files” setting will no longer have any bearing on upload security. Basically, the feature will more appropriately be called “secure uploads” instead of “secure media”.

This is being done because there are communities out there that would like all attachments and media to be secure based on category rules but still allow anonymous users to download attachments in public places, which is not possible in the current arrangement.
 		2020-03-26 07:16:02 +10:00
..
000-mini_sql.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
000-post_migration.rb FIX: Migration paths were being forgotten 2019-12-16 14:13:47 -05:00
000-trace_pg_connections.rb DEV: Silence spurious rubocop lint warning 2020-02-19 13:10:30 +11:00
001-redis.rb DEV: s/\$redis/Discourse\.redis (#8431) 2019-12-03 10:05:53 +01:00
002-freedom_patches.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
003-sql_builder.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
004-message_bus.rb SECURITY: Restrict message-bus access on login_required sites 2019-08-14 09:43:12 +01:00
004-rails_multisite.rb FIX: Sidekiq fails to start if any of the multisite has problems. 2018-12-12 11:30:14 +08:00
005-site_settings.rb FIX: Fix rake db:create after zeitwerk changes 2019-10-08 12:22:34 +01:00
006-ensure_login_hint.rb FEATURE: SKIP_DB_AND_REDIS env var (#7756) 2019-06-13 12:58:27 +10:00
006-mini_profiler.rb FIX: Ignore secure-media-uploads for miniprofiler (#9070) 2020-02-28 12:11:30 +10:00
008-rack-cors.rb Allow CORS combined with HTTP Auth 2019-09-09 15:02:20 -04:00
009-omniauth.rb DEV: Drop legacy OpenID 2.0 support (#8894) 2020-02-07 17:32:35 +00:00
012-web_hook_events.rb DEV: Remove code deprecated by the new Reviewable API (#8023) 2019-08-26 10:33:26 -03:00
013-excon_defaults.rb DEV: Upgrading Discourse to Zeitwerk (#8098) 2019-10-02 14:01:53 +10:00
014-track-setting-changes.rb FIX: Change secure media to encompass attachments as well (#9271) 2020-03-26 07:16:02 +10:00
099-anon-cache.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
099-drain_pool.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-i18n.rb FIX: Failed to restore backups from versions without translation overrides 2020-03-14 00:00:22 +01:00
100-logster.rb DEV: Bump logster version to 2.6.1 and enable new logster feature 2020-02-07 13:35:26 +00:00
100-oj.rb DEV: default Oj to compat mode 2020-01-16 07:52:28 +11:00
100-onebox_options.rb FIX: include onebox default options in development environment 2019-11-07 15:42:53 +05:30
100-push-notifications.rb FIX: Make initializer work on first db:migrate 2019-07-30 10:23:24 +02:00
100-quiet_logger.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-secret_token.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-session_store.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-sidekiq.rb PERF: avoid shelling to get hostname aggressively 2020-02-18 15:13:19 +11:00
100-silence_logger.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-strong_parameters.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-verify_config.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
100-watch_for_restart.rb DEV: s/\$redis/Discourse\.redis (#8431) 2019-12-03 10:05:53 +01:00
100-wrap_parameters.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
101-lograge.rb DEV: check for specifics when looking at ENABLE_LOGRAGE 2019-06-13 15:59:20 +10:00
200-message_bus_request_tracker.rb FEATURE: enable_performance_http_headers for performance diagnostics 2019-06-05 16:08:11 +10:00
300-perf.rb FEATURE: add hook after all initializers 2019-08-26 10:49:26 +10:00