Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/app/models/concerns
History
Exact
discourse-patch-triage[bot] 0f50a07a6e SECURITY: Signup-time primary_group_id assignment grants whisperer access [backport 2026.1] 
Backport of #698 to release/2026.1.

---

## Summary

Applies security patch from triage.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-vmwq-jvxx-jwfx

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/978
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:27:06 +02:00
..
reports SECURITY: Do not leak PM post edits to moderators 2026-03-19 15:46:24 +00:00
anon_cache_invalidator.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
cached_counting.rb DEV: Upgrade the Redis gem to v5.4 2025-03-19 14:34:00 +01:00
category_hashtag.rb DEV: Fix Lint/ShadowingOuterLocalVariable (#32036) 2025-03-27 13:50:24 +01:00
custom_field.rb DEV: Add true_fields method for CustomFields (#24876) 2023-12-14 11:06:21 -06:00
has_custom_fields.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
has_deprecated_columns.rb DEV: Remove version-number-based logic (#25482) 2024-01-30 17:34:10 +00:00
has_destroyed_web_hook.rb FEATURE: granular webhooks (#23070) 2023-10-09 03:35:31 +00:00
has_post_upload_references.rb FIX: Fallback to upload URLs when SHA1 doesn’t match (#36299) 2025-11-28 12:25:38 +01:00
has_sanitizable_fields.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
has_search_data.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
has_url.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
limited_edit.rb FIX: Always trust admin and moderators with post edits (#25602) 2024-02-08 13:10:26 +10:00
locale_matchable.rb DEV: Use localizable concerns across post, topic, categories (#34137) 2025-08-07 22:12:01 +08:00
localizable.rb FEATURE: Serve localized content in the site's default locale when user's language is unsupported (#36160) 2025-11-21 17:19:04 +08:00
positionable.rb FIX: Update position on model when re-positioning record (#24997) 2023-12-21 10:15:10 +08:00
reviewable_action_builder.rb FIX: Allow moderators to unhide posts using acting_user context (#36512) 2025-12-09 09:25:52 +08:00
roleable.rb SECURITY: Signup-time primary_group_id assignment grants whisperer access [backport 2026.1] 2026-06-30 16:27:06 +02:00
searchable.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
second_factor_manager.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
stats_cacheable.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
topic_tracking_state_publishable.rb DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
trashable.rb DEV: Added .only_deleted scope in the Trashable module (#20196) 2023-02-07 15:28:59 -03:00