Ted Johansson 0c11acf6cf

SECURITY: Encode embed url (#21134) ...

The embed_url in "This is a companion discussion..." could be used for
XSS.

Co-authored-by: Blake Erickson <o.blakeerickson@gmail.com>

2023-04-18 15:05:33 +08:00

..

assets

SECURITY: Fix XSS in full name composer reply

2023-03-16 16:25:48 -06:00

controllers

SECURITY: Ensure site setting being updated is a configurable site setting (#21132)

2023-04-18 14:32:21 +08:00

helpers

DEV: Apply syntax_tree formatting to app/*

2023-01-09 14:14:59 +00:00

jobs

DEV: Fix threading error when running jobs immediately in system tests (#19811)

2023-01-10 13:41:25 +08:00

mailers

DEV: Apply syntax_tree formatting to app/*

2023-01-09 14:14:59 +00:00

models

SECURITY: Encode embed url (#21134)

2023-04-18 15:05:33 +08:00

serializers

FIX: Preload user sidebar attrs when ?enable_sidebar=1 (#19843)

2023-01-25 13:48:49 +02:00

services

FIX: Do not add empty use/svg tags in ExcerptParser (#19969)

2023-01-25 13:48:49 +02:00

views

UX: add btn-primary class on email confirm page (#19803)

2023-01-09 15:26:56 -05:00