| .. |
|
admin
|
FIX: Can't update `Groups#allow_membership_requests` in admin.
|
2016-12-20 15:14:35 +08:00 |
|
users
|
FIX: redirects back to origin for SSO and omniauth login
|
2016-09-16 13:48:50 +10:00 |
|
about_controller.rb
|
PERF: Rendering crawler's template is expensive.
|
2016-04-07 16:28:31 +02:00 |
|
application_controller.rb
|
SECURITY: prevent reuse of password reset
|
2016-12-19 18:00:22 +11:00 |
|
badges_controller.rb
|
Advanced Search UI
|
2016-10-04 11:18:01 -04:00 |
|
categories_controller.rb
|
Merge pull request #4609 from joebuhlig/category-topics-wiki
|
2016-12-20 09:15:51 +11:00 |
|
category_hashtags_controller.rb
|
FIX: Query for category hashtag should be case sensitive.
|
2016-03-28 11:15:10 +08:00 |
|
clicks_controller.rb
|
…
|
|
|
composer_messages_controller.rb
|
FIX: Duplicate link shouldn't happen on edit
|
2016-06-08 17:22:23 -04:00 |
|
directory_items_controller.rb
|
PERF: Remove ordering by username.
|
2016-10-15 01:13:58 +08:00 |
|
draft_controller.rb
|
…
|
|
|
email_controller.rb
|
User interface for watching first post
|
2016-07-07 11:21:50 -04:00 |
|
embed_controller.rb
|
Better error messages when embedding fails
|
2016-12-13 14:38:05 -05:00 |
|
exceptions_controller.rb
|
…
|
|
|
export_csv_controller.rb
|
FIX: export user list based on trust level filter
|
2016-03-07 18:49:31 +05:30 |
|
extra_locales_controller.rb
|
FIX: Ensure that translations bundle exists before merging plugin bundle.
|
2016-09-30 14:29:30 +08:00 |
|
finish_installation_controller.rb
|
FIX: Show an error page if `finish-installation` can't run
|
2016-12-07 11:10:08 -05:00 |
|
forums_controller.rb
|
Delete useless home_redirect method from ForumsController.
|
2016-10-27 15:45:22 +01:00 |
|
groups_controller.rb
|
PERF: N+1 query on groups page.
|
2016-12-21 20:59:09 +08:00 |
|
highlight_js_controller.rb
|
…
|
|
|
invites_controller.rb
|
FIX: simplify CSV file upload
|
2016-12-05 14:09:08 +05:30 |
|
list_controller.rb
|
FIX: Add tags to list options from params
|
2016-11-26 08:24:52 -06:00 |
|
metadata_controller.rb
|
Refactor desktop notifications to be more modular.
|
2016-07-01 00:11:32 +08:00 |
|
notifications_controller.rb
|
FEATURE: clean API method for reading a single notification
|
2016-09-16 16:14:15 +10:00 |
|
onebox_controller.rb
|
FIX: prevent DDoS with lots of _oneboxable_ links
|
2016-12-20 00:31:10 +01:00 |
|
permalinks_controller.rb
|
…
|
|
|
post_action_users_controller.rb
|
…
|
|
|
post_actions_controller.rb
|
SECURITY: Users can only bookmark posts which they can see.
|
2016-12-21 12:01:26 +08:00 |
|
posts_controller.rb
|
SECURITY: don't grant same privileges to user_api and api access
|
2016-12-16 12:05:43 +11:00 |
|
queued_posts_controller.rb
|
FIX: better error message when trying to approve post for closed/deleted topic
|
2016-06-24 15:11:45 +05:30 |
|
robots_txt_controller.rb
|
…
|
|
|
safe_mode_controller.rb
|
FIX: Incorrect path for redirect.
|
2016-12-19 18:12:15 +08:00 |
|
search_controller.rb
|
SECURITY: restrict constantize classes in search controller
|
2016-06-17 13:47:34 +10:00 |
|
session_controller.rb
|
FEATURE: rate limit by login on password reset
|
2016-12-19 11:03:07 +11:00 |
|
similar_topics_controller.rb
|
…
|
|
|
site_controller.rb
|
FEATURE: basic info route for all sites, even ones that require login
|
2016-08-12 17:10:35 +10:00 |
|
site_customizations_controller.rb
|
…
|
|
|
static_controller.rb
|
FIX: on 404 from brotli asset path return a correctly encoded doc
|
2016-12-15 16:05:20 +11:00 |
|
steps_controller.rb
|
FIX: You should be an admin to do the wizard
|
2016-09-22 11:12:51 -04:00 |
|
stylesheets_controller.rb
|
…
|
|
|
tag_groups_controller.rb
|
PERF: tag groups index query
|
2016-07-15 17:16:26 -04:00 |
|
tags_controller.rb
|
FIX: topic list filters for bookmarked, posted, and read now work with tag filter
|
2016-12-02 15:58:14 -05:00 |
|
topics_controller.rb
|
SECURITY: Users can only bookmark posts which they can see.
|
2016-12-21 12:01:26 +08:00 |
|
uploads_controller.rb
|
SECURITY: protect upload params, only allow very strict filenames
|
2016-12-19 10:16:18 +11:00 |
|
user_actions_controller.rb
|
got to be careful with integrity specs
|
2016-11-29 18:01:09 +11:00 |
|
user_api_keys_controller.rb
|
FEATURE: user API now contains scopes so permission is granular
|
2016-10-14 16:05:42 +11:00 |
|
user_avatars_controller.rb
|
SECURITY: limit route access when using external avatars
|
2016-07-28 09:00:43 +10:00 |
|
user_badges_controller.rb
|
FIX: badge grant count wasn't filtered to the current user in the user summary
|
2016-03-30 23:11:00 +02:00 |
|
users_controller.rb
|
SECURITY: prevent reuse of password reset
|
2016-12-19 18:00:22 +11:00 |
|
users_email_controller.rb
|
SECURITY: Support for confirm old as well as new email accounts
|
2016-03-08 14:52:22 -05:00 |
|
webhooks_controller.rb
|
FIX: use metadata to hold the message_id with sparkpost
|
2016-10-27 19:35:50 +02:00 |
|
wizard_controller.rb
|
FIX: You should be an admin to do the wizard
|
2016-09-22 11:12:51 -04:00 |
5e75d5c1bf