Blake Erickson 3374457c44 SECURITY: Fix XSS in full name composer reply ...

We are using htmlSafe when rendering the name field so we need to escape
any html being passed in.

2023-03-16 16:25:48 -06:00

..

admin

SECURITY: Convert send_digest to a post request (#19746)

2023-01-05 06:57:12 +08:00

bootstrap-json

FIX: Preload user sidebar attrs when ?enable_sidebar=1 (#19843)

2023-01-25 13:48:49 +02:00

confirm-new-email

DEV: Update linting setup and fix issues (#17345)

2022-07-06 10:37:54 +02:00

dialog-holder

DEV: Update json5, remove an unused lockfile (#19732)

2023-01-04 23:15:49 +01:00

discourse

SECURITY: Fix XSS in full name composer reply

2023-03-16 16:25:48 -06:00

discourse-common

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

discourse-ensure-deprecation-order

DEV: Silence 3.x deprecations

2022-07-19 10:00:59 +01:00

discourse-hbr

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

discourse-plugins

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

discourse-widget-hbs

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

docs

…

ember-addons

…

ember-cli-progress-ci

DEV: Add progress output in CI during ember-cli build (#17977)

2022-08-17 22:39:52 +01:00

locales

FEATURE: Add Croatian language (#17130)

2022-06-18 00:18:22 +02:00

pretty-text

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

select-kit

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

truth-helpers

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

wizard

Build(deps): Bump @babel/core in /app/assets/javascripts (#19723)

2023-01-04 22:50:20 +01:00

.licensee.json

DEV: Have licensee check xmldom license (#18840)

2022-11-02 11:51:11 -04:00

.npmrc

…

discourse-js-processor.js

DEV: Introduce minification and source maps for Theme JS (#18646)

2022-10-18 18:20:10 +01:00

handlebars-shim.js

…

package.json

DEV: Make dialog-holder a monorepo package (#19051)

2022-11-16 16:43:45 +01:00

polyfills.js

DEV: Add polyfill for String.prototype.replaceAll (#16301)

2022-03-28 17:18:56 +01:00

service-worker.js.erb

FEATURE: Replyable chat push notifications (#18973)

2022-11-11 12:30:21 -03:00

yarn.lock

Build(deps): Bump jsdom from 20.0.3 to 21.0.0 in /app/assets/javascripts (#19786)

2023-01-08 23:41:14 +01:00