Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 07:23:30 +08:00
Code Packages Activity Actions
discourse/lib
History
Exact
discoursebot 4bf07cf953
 SECURITY: Access control bypass in PM email recipients defeats message opt-out [backport 2026.1] (#41938) 
Backport of #41932 to release/2026.1.

---

## Summary

Prevent a private message opt-out bypass by enforcing authorization
checks when targeting recipients by email address. TopicCreator now
validates that the sender has permission to message an existing user
identified via email, ensuring the recipient's private message
preferences are correctly respected.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1371

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>

Co-authored-by: Keegan George <kgeorge13@gmail.com>
2026-07-22 11:15:27 -07:00
..
action_dispatch/session Revert "DEV: Debug cookie overflows" (#35120) 2025-10-02 09:55:47 +02:00
active_support_type_extensions DEV: Add symbol to ActiveModel attribute types (#36420) 2025-12-03 10:57:44 +01:00
auth SECURITY: Bind shared session key to auth token and enforce user gates [backport 2026.1] (#41691) 2026-07-14 15:48:25 +08:00
autospec DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
backup_restore SECURITY: block cross-site backup traversal in multisite local storage [backport 2026.1] 2026-05-19 00:26:55 +01:00
common_passwords
compression Revert "Build(deps): Bump rubyzip from 2.4.1 to 3.2.2 (#35749)" (#37219) 2026-01-20 18:22:20 +00:00
content_security_policy FIX: invalid CSP directive sources should allow site to boot with valid CSP directives (#31256) 2025-02-10 20:38:36 +08:00
demon DEV: Remove IMAP support in Discourse (#37002) 2026-01-12 10:07:26 +10:00
discourse_dev DEV: Limit dev reviewable seeding to unapproved users (#35676) 2025-10-29 16:00:34 +08:00
discourse_webauthn DEV: Rename SecureSession to ServerSession 2025-09-18 16:31:03 +02:00
email SECURITY: Prevent any signed AWS SNS TopicARN from being accepted via webhooks [backport 2026.1] 2026-06-30 16:27:06 +02:00
email_controller_helper DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
faker DEV: Don't run dev-only code in specs (#23427) 2023-09-06 02:14:57 +02:00
file_store SECURITY: Download allowlist for uploaded files 2026-01-28 17:11:14 +00:00
final_destination SECURITY: Add FastImage SSRF safe freedom patch 2024-07-03 20:49:15 +08:00
freedom_patches DEV: Remove the obsolete sidekiq patch (#37145) 2026-01-19 16:00:06 +01:00
generators DEV: Remove deprecated trust level access settings (#36414) 2025-12-11 11:09:29 +10:00
guardian SECURITY: /solution/by_user leaks whisper/hidden accepted-answer post [backport 2026.1] (#41492) 2026-07-07 10:42:46 -05:00
i18n DEV: Enable Rails 7.1 defaults 2024-08-12 10:41:13 +02:00
import DEV: lint against Layout/EmptyLineBetweenDefs (#24914) 2023-12-15 23:46:04 +08:00
import_export DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
middleware FEATURE: Add native support for /llms.txt (#36939) 2026-01-20 08:53:20 +01:00
migration DEV: Correct method signature of NiceErrors#migrate (#37065) 2026-01-12 19:28:49 +00:00
onebox FIX: Don't escape HTML entities twice in oneboxes (#37141) 2026-01-16 11:40:18 +01:00
plugin UX: Sort admin sidebar plugin links alphabetically (#36674) 2025-12-18 12:15:06 +01:00
pretty_text DEV: Refactor locale bundle loading (#37114) 2026-01-16 11:45:14 +00:00
rate_limiter DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
request_tracker/rate_limiters DEV: API to register custom request rate limiting conditions (#30239) 2024-12-23 09:57:18 +08:00
reviewable FIX: ensure remove_reviewable_ids is always an array (#37131) 2026-01-15 10:35:59 +08:00
scheduler FIX: handle more thread pool edge cases (#30392) 2024-12-20 11:50:00 +11:00
search FIX: Respect show_original for search results (#36042) 2025-11-17 12:06:08 +08:00
second_factor FIX: URL encode usernames in grant admin redirect (#34664) 2025-10-13 09:49:23 +08:00
seed_data UX: Migrate experimental_rename_faq_to_guidelines to upcoming change (#36971) 2026-01-07 10:55:10 +10:00
service DEV: Handle nested attributes in contracts (#36348) 2025-12-12 11:41:48 +01:00
sidekiq FIX: Ensure retry_count is set when checking if a job is being retried (#36034) 2025-11-14 14:18:50 +11:00
site_settings FEATURE: Support non-image file uploads in site settings (#37005) 2026-01-19 22:37:38 +01:00
stylesheet DEV: Rename theme-transpiler to asset-processor (#35498) 2025-10-20 14:16:46 +01:00
tasks DEV: Auto-close security PRs after they're merged (#37348) 2026-01-28 15:40:42 +00:00
theme_settings_manager FEATURE: porting type object to site settings (#32706) 2025-05-13 14:30:24 -03:00
theme_store DEV: Allow stylesheet entrypoints to use @use (#31905) 2025-03-26 09:15:32 +00:00
topic_query SECURITY: Restrict tagged group message lists [backport 2026.1] (#41392) 2026-07-06 12:18:30 +08:00
turbo_tests DEV: Enforce deprecation-free tests for preinstalled plugins/themes (#36445) 2025-12-16 17:48:29 -03:00
upcoming_changes FEATURE: Notify admins of upcoming changes and log events (#37003) 2026-01-21 12:45:54 +10:00
validators FEATURE: add composer form template field type (#31584) 2026-01-20 15:48:50 -03:00
wizard UX: One step wizard (#36082) 2025-11-25 13:35:32 -05:00
admin_confirmation.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
admin_constraint.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
admin_user_index_query.rb DEV: Hand-pick Rails/WhereNot autofixes (#35117) 2025-10-03 13:29:22 +02:00
age_words.rb DEV: Move distance_of_time_in_words/time_ago_in_words (#21745) 2023-05-25 14:53:59 +02:00
application_layout_preloader.rb FEATURE: Add upcoming change CSS classes to <body> (#36586) 2025-12-11 11:09:09 +10:00
archetype.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
asset_processor.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
auth.rb DEV: Add Discourse ID authenticator (#33186) 2025-06-17 09:47:00 -04:00
backup_restore.rb DEV: Rename Backuper to Creator 2026-01-22 18:46:02 +00:00
badge_posts_view_manager.rb
badge_queries.rb FIX: BadgeQueries.sharing_badge not counting unique visitors (#36281) 2025-11-27 14:37:27 +08:00
base62.rb DEV: Bump rubocop_discourse (#29608) 2024-11-06 06:27:49 +08:00
bookmark_manager.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
bookmark_query.rb FIX: Respect permissions when counting bookmarks in user summary (#36856) 2026-01-21 16:34:55 +01:00
bookmark_reminder_notification_handler.rb FIX: don't clear reminder on deleted bookmarks (#35987) 2025-11-12 17:47:07 +01:00
bookmarks_bulk_action.rb FIX: Bookmark reminder was clearing incorrectly (#28506) 2024-08-26 09:17:39 +10:00
browser_detection.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
cache.rb FIX: race condition in Discourse.cache.fetch (#28124) 2024-07-30 09:08:12 +02:00
canonical_url.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
category_badge.rb UX: fix category badges on 404 page and oneboxes (#34071) 2025-08-04 14:02:51 -04:00
chrome_installed_checker.rb DEV: correctly detect chromium on macos (#35441) 2025-10-16 14:54:58 +02:00
color_math.rb UX: Calculate missing hover/selected colors from existing colors (#20105) 2023-02-01 09:55:21 +00:00
comment_migration.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
common_passwords.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
composer_messages_finder.rb FIX: composer educational limit should use post count (#33650) 2025-07-17 18:15:18 +04:00
configurable_urls.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
content_buffer.rb DEV: Enable unless cops 2023-02-21 10:30:48 +01:00
content_localization.rb DEV: Move locale check to unified concern (#35207) 2025-10-06 20:11:52 +08:00
content_security_policy.rb DEV: Remove unsafe_eval from test/theme-test CSP (#28774) 2024-09-06 13:28:33 +02:00
cooked_post_processor.rb FIX: Fallback to upload URLs when SHA1 doesn’t match (#36299) 2025-11-28 12:25:38 +01:00
cooked_processor_mixin.rb DEV: remove magnific lightbox (#36375) 2025-12-03 09:57:53 +04:00
crawler_detection.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
csrf_token_verifier.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
current_user.rb DEV: Allow impersonation without session swapping (#34213) 2025-08-21 14:18:15 +08:00
custom_renderer.rb
db_helper.rb SECURITY: Preload data only when rendering application layout 2025-02-04 13:32:30 -03:00
directory_helper.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
discourse.rb DEV: Remove the obsolete sidekiq patch (#37145) 2026-01-19 16:00:06 +01:00
discourse_connect_base.rb FEATURE: Increase default DiscourseConnect session length (#26261) 2024-03-20 14:02:12 +00:00
discourse_connect_provider.rb DEV: lint against Layout/EmptyLineBetweenDefs (#24914) 2023-12-15 23:46:04 +08:00
discourse_dev.rb
discourse_diff.rb DEV: Update nokogiri to 1.18.1 (#30554) 2025-01-07 12:05:39 +01:00
discourse_event.rb DEV: Add :push_notification event and deprecate :post_notification_alert (#22917) 2023-08-02 18:44:19 -03:00
discourse_hub.rb Build(deps): Bump excon from 1.2.5 to 1.3.2 (#36433) 2026-01-15 13:41:31 +01:00
discourse_id.rb FEATURE: Discourse ID setting page (#36316) 2025-12-11 16:04:09 +01:00
discourse_ip_info.rb FIX: Rescue and warn when error is encountered in DiscourseIpInfo.mmdb_download (#28134) 2024-07-30 11:33:20 +08:00
discourse_logstash_logger.rb FIX: Avoid NoMethodError in DiscourseLogstashLogger (#37253) 2026-01-22 09:18:13 +08:00
discourse_plugin_registry.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
discourse_redis.rb DEV: Upgrade the Redis gem to v5.4 2025-03-19 14:34:00 +01:00
discourse_tagging.rb SECURITY: Apply category tag visibility to full-text search [backport 2026.1] (#41673) 2026-07-13 15:16:49 -03:00
discourse_updates.rb FIX: Handle boolean values in version check response [backport 2026.1] (#38788) 2026-03-23 16:14:23 +00:00
discourse_webauthn.rb DEV: Allow ServerSession to store arbitrary data (#34919) 2025-09-26 10:35:28 +02:00
disk_space.rb PERF: Faster disk space calculation on upload heavy instances (#28307) 2024-10-24 12:11:40 +02:00
distributed_cache.rb DEV: Reduce duplication with DistributedMutex#clear_regex (#25795) 2024-02-21 14:19:04 -06:00
distributed_memoizer.rb
distributed_mutex.rb DEV: Upgrade the Redis gem to v5.4 2025-03-19 14:34:00 +01:00
edit_rate_limiter.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
email.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
email_backup_token.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
email_cook.rb DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
email_templates_finder.rb FIX: Add new/missing email templates to the email templates editor (#28075) 2024-07-30 00:27:41 +03:00
email_updater.rb DEV: remove email updater debugging (#32664) 2025-05-09 15:11:11 +04:00
ember_cli.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
encodings.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
enum.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
enum_site_setting.rb
excerpt_parser.rb DEV: Add keep_images option to ExcerptParser (#36077) 2025-11-19 09:20:20 +10:00
external_upload_helpers.rb SECURITY: Regular users can route multipart uploads into the admin backup store [backport 2026.1] 2026-06-30 16:27:06 +02:00
feed_element_installer.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
feed_item_accessor.rb
file_helper.rb SECURITY: Download allowlist for uploaded files 2026-01-28 17:11:14 +00:00
filter_best_posts.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
final_destination.rb SECURITY: Loose hostname matching in FinalDestination 2026-01-28 17:11:14 +00:00
flag_query.rb
flag_settings.rb FEATURE: custom flag can require additional message (#27908) 2024-07-18 10:10:22 +10:00
gaps.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
gc_stat_instrumenter.rb DEV: Seperate concerns of tracking GC stat from MethodProfiler (#22921) 2023-08-02 10:46:37 +08:00
git_repo.rb FEATURE: display commit hash for each plugin on /admin/plugins page. (#22176) 2023-06-26 10:09:57 +05:30
git_url.rb SECURITY: Prevent ReDOS by making the SSH url regex unambiguous (#20000) 2023-01-25 18:55:01 +02:00
git_utils.rb DEV: GitUtils overriding via config/git-utils-overrides.json [backport 2026.1] (#37897) 2026-02-18 11:23:39 +00:00
global_path.rb DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
group_lookup.rb FEATURE: display PM participant group names in the topics list. (#21677) 2023-05-31 19:32:06 +05:30
guardian.rb SECURITY: Prevent moderators from exporting admin-only reports via CSV [backport 2026.1] 2026-03-31 15:12:50 +01:00
has_errors.rb FIX: prevents PM to large groups (#28681) 2024-09-03 12:08:14 +02:00
highlight_js.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
hijack.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
homepage_constraint.rb FIX: Regression in custom homepage modifier used in theme components (#27569) 2024-06-21 11:24:11 -04:00
homepage_helper.rb DEV: Show login-required splash in root route (take 2) (#32629) 2025-05-14 11:25:43 -04:00
html_prettify.rb DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
html_to_markdown.rb DEV: Bump rubocop_discourse (#29608) 2024-11-06 06:27:49 +08:00
http_language_parser.rb FIX: Language parser matches with dashes or underscores (#31381) 2025-02-19 11:55:14 +08:00
http_user_agent_encoder.rb DEV: Apply suggested changes 2024-06-11 14:02:46 +02:00
image_sizer.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
impersonator_constraint.rb DEV: Allow impersonation without session swapping (#34213) 2025-08-21 14:18:15 +08:00
import_export.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
inline_oneboxer.rb FEATURE: Add inline_onebox_user_agent site setting (#37324) 2026-01-28 08:43:12 +11:00
job_time_spacer.rb FEATURE: Auto-remove users without permission from channel (#20344) 2023-03-22 10:19:59 +10:00
js_locale_helper.rb DEV: Refactor locale bundle loading (#37114) 2026-01-16 11:45:14 +00:00
json_error.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
letter_avatar.rb DEV: replace imagemagick convert commands with magick (#27767) 2024-07-08 16:55:59 +08:00
localization_attributes_replacer.rb FIX: Deleted topic causes an issue when replacing attributes (#34286) 2025-08-13 17:58:45 +08:00
localized_cooked_post_processor.rb FEATURE: Add support for uploads on translated posts (#35871) 2025-11-12 08:55:21 -08:00
markdown_linker.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
mem_info.rb DEV: Move non scheduled problem checks to classes (#26122) 2024-03-14 10:55:01 +08:00
message_bus_diags.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
method_profiler.rb DEV: always load the excon gem 2026-01-15 17:13:11 -05:00
mini_scheduler_long_running_job_logger.rb DEV: Log a warning message when a MiniScheduler scheduled job is stuck (#28258) 2024-08-08 12:20:16 +08:00
mini_sql_multisite_connection.rb DEV: Track SQL queries from MiniSql (#28824) 2024-09-11 10:14:53 +03:00
mobile_detection.rb FIX: Update 'modern mobile' regex following iOS 15 support drop (#34792) 2025-09-12 11:33:30 -04:00
new_post_manager.rb FIX: Moderator notifications when new post auto-silences a user (#35403) 2025-10-15 16:07:56 +08:00
new_post_result.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
notification_levels.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
onebox.rb SECURITY: Prevent Onebox cache overflow by limiting downloads and URL lengths 2023-11-09 13:39:18 +11:00
oneboxer.rb SECURITY: Check topic visibility in Oneboxer even when categories match [backport 2026.1] 2026-03-31 15:12:50 +01:00
onpdiff.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
password_hasher.rb FEATURE: Persist password hashing algorithm/params in database (#20980) 2023-04-11 10:16:28 +01:00
pbkdf2.rb PERF: Use OpenSSL::KDF for Pbkdf2 implementation (#20982) 2023-04-05 17:00:05 +01:00
permalink_constraint.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
pinned_check.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
pitchfork_logstash_patch.rb DEV: Add Pitchfork alongside Unicorn (#35370) 2025-10-24 11:08:23 +02:00
plain_text_to_markdown.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
plugin.rb DEV: Fixup plugin initialization guard (#24628) 2023-11-29 11:44:09 +00:00
plugin_gem.rb DEV: Search for -gnu gem variants (#27347) 2024-06-05 14:58:02 +02:00
post_action_creator.rb FIX: Topic creation failure when enabled category moderation (#36094) 2025-11-19 14:07:10 +08:00
post_action_destroyer.rb FIX: Allow moderators to unhide posts using acting_user context (#36512) 2025-12-09 09:25:52 +08:00
post_action_result.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
post_action_type_view.rb FIX: Missing/incorrect flag reason in account_deleted emails (#34955) 2025-11-17 15:22:22 +00:00
post_creator.rb SECURITY: Replying to a whisper lets non-whisperers create staff-only whisper posts [backport 2026.1] 2026-05-19 00:26:55 +01:00
post_destroyer.rb FIX: Avoid reload side effects in PostDestroyer#recover (#36983) 2026-01-19 17:14:42 +01:00
post_jobs_enqueuer.rb DEV: Add import_embed_unlisted site setting (#26222) 2024-03-27 08:57:43 -04:00
post_localization_creator.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
post_localization_destroyer.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
post_localization_updater.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
post_locker.rb
post_merger.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
post_revisor.rb SECURITY: Potential DoS on posts requests [backport 2026.1] (#41095) 2026-06-23 11:31:16 -04:00
presence_channel.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
pretty_text.rb DEV: Prepare for rename of app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
promotion.rb FIX: Remove groups when promotion is recalculated. (#31058) 2025-01-30 14:24:18 +11:00
quote_comparer.rb DEV: Correct Style/RedundantReturn rubocop issues (#23052) 2023-08-10 02:03:38 +02:00
quote_rewriter.rb SECURITY: escape display names 2023-11-09 13:39:06 +11:00
rake_helpers.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
rate_limiter.rb DEV: Upgrade the Redis gem to v5.4 2025-03-19 14:34:00 +01:00
read_only_mixin.rb FIX: improve "read only" modes (#33521) 2025-07-10 09:08:00 +02:00
require_dependency_backward_compatibility.rb DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
retrieve_title.rb FIX: Inline oneboxes should obey the locale. (#30664) 2025-01-09 17:22:22 +11:00
route_format.rb SECURITY: block cross-site backup traversal in multisite local storage [backport 2026.1] 2026-05-19 00:26:55 +01:00
route_matcher.rb DEV: Remove logical OR assignment of constants (#29201) 2024-10-16 10:09:07 +08:00
rtl.rb DEV: Remove duplicate definition of RTL locales and add Uyghur to the list (#27387) 2024-06-08 21:24:39 +02:00
s3_cors_rulesets.rb DEV: Add X-Amz-Tagging header (#36105) 2025-11-21 14:25:02 +11:00
s3_helper.rb FIX: Set tagging_directive to "REPLACE" in S3Helper#copy [backport 2026.1] (#37887) 2026-02-18 18:21:55 +11:00
s3_inventory.rb DEV: Hand-pick Rails/WhereNot autofixes (#35117) 2025-10-03 13:29:22 +02:00
schema_settings_object_validator.rb DEV: Add datetime type for site settings / object settings (#36849) 2025-12-30 10:52:30 -06:00
score_calculator.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
screening_model.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
search.rb SECURITY: Apply category tag visibility to full-text search [backport 2026.1] (#41673) 2026-07-13 15:16:49 -03:00
secure_upload_endpoint_helpers.rb DEV: Add SecureUploadEndpointHelpers for controllers (#25758) 2024-02-20 11:19:22 +10:00
server_session.rb DEV: Allow ServerSession to store arbitrary data (#34919) 2025-09-26 10:35:28 +02:00
service.rb DEV: Replace params by the contract object in services 2024-10-25 14:48:34 +02:00
shrink_uploaded_image.rb FIX: Ignore invalid images when shrinking uploads (#25346) 2024-01-22 12:10:29 +01:00
sidekiq_logster_reporter.rb DEV: Upgrade Sidekiq to v7.3.9 2025-03-10 15:02:48 +01:00
sidekiq_long_running_job_logger.rb DEV: Upgrade Sidekiq to v7.3.9 2025-03-10 15:02:48 +01:00
signal_trap_logger.rb DEV: Log Unicorn worker timeout backtraces to Rails.logger (#27257) 2024-06-03 12:51:12 +08:00
site_icon_manager.rb FIX: Handle missing sketch logo during backup restore (#36541) 2025-12-08 19:30:53 +01:00
site_setting_extension.rb DEV: Add "conceptual" status for upcoming changes (#37214) 2026-01-21 16:40:41 +10:00
slug.rb FIX: Emoji.exists? should be consistent with Emoji[] (#36347) 2025-12-01 18:58:30 +01:00
smtp_provider_overrides.rb FIX: Add Azure communication service endpoint to SMTP authentication override (#33226) 2025-10-21 09:39:25 +02:00
socket_server.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
spam_handler.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
staff_constraint.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
staff_message_format.rb
statistics.rb FIX: participating users statistics... (#29293) 2024-10-21 18:18:42 +02:00
suggested_topics_builder.rb DEV: Hand-pick Rails/WhereNot autofixes (#35117) 2025-10-03 13:29:22 +02:00
svg_sprite.rb FEATURE: Simplify category creation, hide settings (#36998) 2026-01-27 14:51:30 +10:00
system_message.rb UX: add preview to email templates (#36657) 2026-01-08 11:33:53 +04:00
system_themes_manager.rb DEV: Improve system theme loading (#34954) 2025-09-24 17:56:41 +01:00
tag_localization_creator.rb FEATURE: Introduce tag localizations with API, without UI yet (#36754) 2025-12-18 18:25:58 +08:00
tag_localization_destroyer.rb FEATURE: Introduce tag localizations with API, without UI yet (#36754) 2025-12-18 18:25:58 +08:00
tag_localization_updater.rb FEATURE: Introduce tag localizations with API, without UI yet (#36754) 2025-12-18 18:25:58 +08:00
temporary_db.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
temporary_redis.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
text_cleaner.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
text_sentinel.rb DEV: Fix random typos (#33839) 2025-07-24 22:04:13 +02:00
theme_javascript_compiler.rb DEV: Rename theme-transpiler to asset-processor (#35498) 2025-10-20 14:16:46 +01:00
theme_metadata.rb DEV: Remove deprecated/archived theme from CI (#32747) 2025-05-15 13:04:43 +01:00
theme_modifier_helper.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
theme_resolver.rb FEATURE: system themes (#32681) 2025-06-13 10:36:31 +08:00
theme_screenshots_handler.rb DEV: enhance file type support for theme and component screenshots (#36372) 2025-12-02 13:12:11 +08:00
theme_settings_manager.rb FIX: Pass values of objects typed settings to theme migrations (#26751) 2024-04-25 16:39:22 +03:00
theme_settings_parser.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
theme_settings_validator.rb FEATURE: porting type object to site settings (#32706) 2025-05-13 14:30:24 -03:00
theme_site_setting_resolver.rb FEATURE: Themeable site settings (#32233) 2025-07-16 11:00:21 +10:00
theme_translation_manager.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
theme_translation_parser.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
timeline_lookup.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
tiny_japanese_segmenter.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
topic_creator.rb SECURITY: Access control bypass in PM email recipients defeats message opt-out [backport 2026.1] (#41938) 2026-07-22 11:15:27 -07:00
topic_list_responder.rb FEATURE: Localize topic view in crawler view (#34253) 2025-08-13 16:38:07 +08:00
topic_localization_creator.rb FIX: Update topic excerpts when the first post is localized (#36885) 2025-12-29 23:33:39 +08:00
topic_localization_destroyer.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
topic_localization_updater.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
topic_publisher.rb DEV: Add topic_published event (#31239) 2025-02-10 14:58:58 -05:00
topic_query.rb PERF: Speed up TopicQuery#filter_by_tags with match_all_tags (#35787) 2025-11-05 10:33:44 +08:00
topic_query_params.rb DEV: Use tag_name/tag.name instead of tag_id/tag.id where the name is actually used (#36226) 2025-12-29 13:20:06 +08:00
topic_retriever.rb FIX: #present -> #presence typo in TopicRetriever (#20509) 2023-03-02 13:05:45 -03:00
topic_subtype.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
topic_upload_security_manager.rb DEV: Introduce post_should_secure_uploads? plugin modifier (#26508) 2024-04-10 12:02:44 +10:00
topic_view.rb FIX: remove ItemList schema from linkbacks in crawler view (#36608) 2025-12-11 10:41:47 +01:00
topics_bulk_action.rb FEATURE: Allow users to bulk recategorize silently (#33490) 2025-07-15 11:42:30 +08:00
topics_filter.rb FEATURE: allow filtering of tag groups with special chars (#37049) 2026-01-13 11:53:08 +11:00
truncate_logs_formatter.rb SECURITY: Add a default limit as to when logs should be truncated 2023-10-16 10:34:38 -04:00
trust_level.rb FIX: recalculate respects default invitee trust level (#32393) 2025-04-23 09:49:44 +08:00
turbo_tests.rb DEV: Repair RSpec full_cause_backtrace under bin/turbo_rspec (#26087) 2024-03-07 18:35:46 +00:00
twitter_api.rb Revert "DEV: Replace Rinku native gem with PrettyText" (#31692) 2025-03-07 12:01:22 +10:00
unicorn_logstash_patch.rb
unread.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
upcoming_changes.rb UX: Allow plugins to define upcoming change images (#37320) 2026-01-27 17:44:11 +10:00
upload_creator.rb SECURITY: Improve SVG sanitization [backport 2026.1] 2026-06-30 16:27:06 +02:00
upload_markdown.rb DEV: Uploads import script can download files (#26816) 2024-05-04 22:48:16 +02:00
upload_recovery.rb DEV: Add setting to tag s3 objects enabling tag based access control policies (#32988) 2025-06-16 13:26:18 +08:00
upload_security.rb FIX: Don't secure the about banner image (#29889) 2024-11-25 11:12:00 +03:00
url_helper.rb DEV: Fix random typos (#33839) 2025-07-24 22:04:13 +02:00
user_comm_screener.rb FIX: likes are not visible when rejecting PMs (#35753) 2025-11-03 16:23:32 +11:00
user_lookup.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
user_name_suggester.rb FIX: Leave username blank during OAuth signup when no valid suggestion exists (#36830) 2026-01-08 11:02:35 +01:00
vary_header.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
version.rb DEV: Bump release branch to v2026.1.5 2026-06-30 16:27:06 +02:00
wizard.rb DEV: Update to lastest rubocop-discourse 2024-05-27 18:06:14 +02:00
work_queue.rb PERF: Don't allow a single user to monopolize the defer queue (#25593) 2024-02-07 13:47:50 -06:00
xml_cleaner.rb FIX: Remove invalid chars from feed XMLs (#24001) 2023-10-19 14:37:37 -03:00