discourse/spec/requests
Sam df45e82377 SECURITY: only allow picking of avatars created by self (#6417)
* SECURITY: only allow picking of avatars created by self

Also adds origin tracking to all uploads including de-duplicated uploads
2018-09-19 22:33:10 -07:00
..
admin FEATURE: match user title when primary group changes 2018-09-17 15:08:39 +10:00
about_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
application_controller_spec.rb FIX: check admin theme cookie against user selectable 2018-09-07 10:47:28 +10:00
badges_controller_spec.rb REFACTOR: about & badge controllers => requests 2018-05-22 13:45:13 +10:00
categories_controller_spec.rb extract inline JS that's used to store preloaded data (#6370) 2018-09-17 16:31:46 +08:00
category_hashtags_controller_spec.rb REFACTOR: category hashtags controller specs to requests (#5936) 2018-06-07 13:09:23 +08:00
clicks_controller_spec.rb REFACTOR: clicks controller specs to requests (#5929) 2018-06-07 12:57:29 +08:00
composer_controller_spec.rb FIX: return 429 when admin api key is limited on admin route 2018-01-12 14:15:26 +11:00
composer_messages_controller_spec.rb REFACTOR: composer messages controller specs to requests (#5940) 2018-06-07 13:51:52 +08:00
directory_items_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
draft_controller_spec.rb REFACTOR: draft controller specs to requests (#5942) 2018-06-07 12:24:20 +08:00
drafts_controller_spec.rb cleanup 2018-09-12 13:10:14 -04:00
email_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
embed_controller_spec.rb FEATURE: backend support for user-selectable components 2018-08-08 14:46:34 +10:00
export_csv_controller_spec.rb FEATURE: Log entity export in staff logs 2018-09-19 03:16:45 +05:30
extra_locales_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
finish_installation_controller_spec.rb FEATURE: Make initial admins TL1 2018-08-22 15:45:24 +10:00
groups_controller_spec.rb FIX: Load more on groups page does not account for params. 2018-08-20 17:08:50 +08:00
inline_onebox_controller_spec.rb REFACTOR: inline onebox controller specs to requests 2018-06-07 13:11:45 +08:00
invites_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
list_controller_spec.rb FIX: wrong category links on subfolder install in rss feed for a category topic list 2018-09-07 10:03:30 -04:00
metadata_controller_spec.rb FEATURE: Update the webmanifest 2018-06-14 00:13:28 -03:00
notifications_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
offline_controller_spec.rb REFACTOR: offline controller spec to requests (#5943) 2018-06-07 12:24:05 +08:00
omniauth_callbacks_controller_spec.rb SPEC: redirect to original URL after social signup 2018-09-05 03:24:50 +05:30
onebox_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
permalinks_controller_spec.rb REFACTOR: permalinks controller specs to requests (#5934) 2018-06-07 13:08:13 +08:00
post_action_users_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
post_actions_controller_spec.rb FIX: Properly display error when post action fails to create. 2018-06-20 21:20:23 +08:00
posts_controller_spec.rb FEATURE: Allow admins to reply without topic bump 2018-08-10 10:48:30 +10:00
push_notification_controller_spec.rb Refactor of `PushSubscriptionPusher`. 2018-05-09 08:14:14 +08:00
queued_posts_controller_spec.rb FIX: allow staff to remove tags from queued topics 2018-06-26 17:08:40 +05:30
robots_txt_controller_spec.rb FEATURE: An API to help sites build robots.txt files programatically 2018-04-16 15:43:20 -04:00
safe_mode_controller_spec.rb Allow staff members to enable safe mode, even if disabled 2018-04-25 11:49:57 -04:00
search_controller_spec.rb FIX: return a 400 error instead of 500 for null injections 2018-09-04 12:11:52 +10:00
session_controller_spec.rb FEATURE: Use S3 dualstack endpoints 2018-08-27 11:22:46 +10:00
similar_topics_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
site_controller_spec.rb FEATURE: selectable avatars 2018-07-18 12:57:43 +02:00
static_controller_spec.rb UX: add a route /rules as an alias for /faq and /guidelines 2018-07-26 15:38:08 -04:00
steps_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
stylesheets_controller_spec.rb FEATURE: backend support for user-selectable components 2018-08-08 14:46:34 +10:00
tag_groups_controller_spec.rb DEV: Basic specs for `TagGroupsController`. 2018-09-18 08:22:03 +08:00
tags_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
topics_controller_spec.rb FIX: links in rss feeds are sometimes wrong on subfolder installs 2018-08-27 18:05:15 -04:00
uploads_controller_spec.rb correct regression around file renaming 2018-08-20 16:08:05 +10:00
user_actions_controller_spec.rb REFACTOR: user actions controller specs to requests 2018-06-07 12:52:06 +08:00
user_api_keys_controller_spec.rb REFACTOR: user api keys contoller specs to request 2018-06-04 16:07:53 +10:00
user_avatars_controller_spec.rb FIX: set old last modified date for invalid avatars 2018-08-31 17:07:31 +10:00
user_badges_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
users_controller_spec.rb SECURITY: only allow picking of avatars created by self (#6417) 2018-09-19 22:33:10 -07:00
users_email_controller_spec.rb FEATURE: improve API error reporting for invalid records 2018-08-21 11:54:34 +10:00
webhooks_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
wizard_controller_spec.rb Merge branch 'wizard-controller' of https://github.com/OsamaSayegh/discourse into OsamaSayegh-wizard-controller 2018-06-07 12:27:48 +08:00