Leonard Teo c13aa8852b Whitelist :active param so that we can automatically create users that are active via API

2014-02-04 15:40:30 -05:00

..

admin

FIX: 1868 Security: Dangerous Send

2014-01-27 13:05:51 -05:00

users

Invite link can't be used to log in after you set a password or sign in with 3rd party

2014-01-21 16:56:41 -05:00

application_controller.rb

Allow using the API when Login required site setting is on.

2014-01-24 14:02:49 +01:00

categories_controller.rb

REMOVE: Get rid of the hotness control for good.

2014-01-29 11:54:34 -05:00

clicks_controller.rb

FIX: Look up a url without the query string if it couldn't be found with it.

2013-12-13 12:56:20 -05:00

composer_messages_controller.rb

New User Education goes through a server side ComposerMessages check. Composer message for users

2013-09-13 12:23:53 -04:00

draft_controller.rb

drafts were saving but client was failing to parse

2013-09-11 16:18:46 +10:00

email_controller.rb

enforce coding convention

2013-03-05 01:42:44 +01:00

embed_controller.rb

Support embedded link counts via data-* attribute

2014-01-13 13:37:55 -05:00

exceptions_controller.rb

404 page had horrible perf, it was using "take" instead of limit.

2013-10-02 13:05:03 +10:00

forums_controller.rb

Remove the access_password site setting

2013-06-25 15:05:25 -04:00

invites_controller.rb

Support for inviting to a forum from a user's invite page.

2013-11-06 12:56:50 -05:00

list_controller.rb

BUGFIX: proper handling of top_menu_items

2014-02-03 16:08:00 +01:00

notifications_controller.rb

Remove some calls to all. They are not required, and Rails4 raises warnings about them.

2013-07-22 20:44:11 +02:00

onebox_controller.rb

Fixes regression with video embeds

2013-03-21 20:53:12 -04:00

post_actions_controller.rb

FIX: Don't select columns if we don't have to.

2013-08-14 12:18:54 -04:00

posts_controller.rb

Add post_edit_time_limit site setting to limit the how long a post can be edited and deleted by the author. Default is 1 year.

2014-01-09 11:55:04 -05:00

robots_txt_controller.rb

Remove the access_password site setting

2013-06-25 15:05:25 -04:00

search_controller.rb

FIX: Search wasn't using the lowercase username for finding the context.

2013-06-10 10:42:06 -04:00

session_controller.rb

Invite link can't be used to log in after you set a password or sign in with 3rd party

2014-01-21 16:56:41 -05:00

static_controller.rb

On sites with login_required enabled, after signup, don't show the /login page again

2013-10-30 16:37:36 -04:00

topics_controller.rb

Delegate bulk operations to a TopicsBulkAction object.

2014-01-30 11:44:29 -05:00

uploads_controller.rb

do not pull hotlinked images when max_image_size_kb == 0

2013-11-13 17:30:48 +01:00

user_actions_controller.rb

FIX: Prevent unauthorized list of private message titles. Also remove some unused code.

2013-09-30 14:35:11 -04:00

users_controller.rb

Whitelist :active param so that we can automatically create users that are active via API

2014-02-04 15:40:30 -05:00