Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 12:09:27 +08:00
Code Packages Activity Actions
discourse/plugins
History
Exact
Isaac Janzen eae3120429
 SECURITY: Shared conversations and artifacts remain accessible (#41554) 
## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-08 14:41:02 -05:00
..
automation I18N: Update translations (#40993) 2026-06-17 18:35:15 +02:00
chat FIX: Validate the length of chat draft data (#41548) 2026-07-08 13:47:10 -05:00
checklist
discourse-adplugin DEV: Bump eslint/lint-configs, and correct violations (#41321) 2026-07-01 10:39:57 +01:00
discourse-affiliate
discourse-ai SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
discourse-apple-auth
discourse-assign FIX: Serialize only a bookmark target's active assignment (#41397) 2026-07-06 06:34:22 +08:00
discourse-cakeday DEV: Remove queryAll uses in core tests (#41324) 2026-07-01 11:55:39 +01:00
discourse-calendar DEV: Bump prettier-plugin-ember-template-tag and reformat (#41489) 2026-07-06 19:18:44 +01:00
discourse-chat-integration I18N: Update translations (#40823) 2026-06-12 16:19:35 +02:00
discourse-data-explorer I18N: Update translations (#41509) 2026-07-08 16:18:53 +02:00
discourse-details DEV: Drop unused decorateCooked from discourse-details (#41426) 2026-07-03 17:18:20 +01:00
discourse-gamification DEV: Bump prettier-plugin-ember-template-tag and reformat (#41489) 2026-07-06 19:18:44 +01:00
discourse-github FEATURE: Route all GitHub API requests through one rate-limited client (#40637) 2026-06-15 10:59:10 +02:00
discourse-graphviz UX: Fit large Graphviz graphs to the box instead of overflowing (#40915) 2026-06-15 22:44:39 +01:00
discourse-hcaptcha DEV: Block external requests in system specs via Chrome DNS resolver (#40685) 2026-06-17 12:29:57 +01:00
discourse-lazy-videos
discourse-local-dates I18N: Update translations (#41257) 2026-06-29 15:30:28 +02:00
discourse-login-with-amazon I18N: Update translations (#40789) 2026-06-11 12:09:07 +02:00
discourse-lti
discourse-math I18N: Update translations (#40680) 2026-06-09 17:21:49 +02:00
discourse-microsoft-auth
discourse-narrative-bot
discourse-oauth2-basic I18N: Update translations (#40789) 2026-06-11 12:09:07 +02:00
discourse-openid-connect I18N: Update translations (#40789) 2026-06-11 12:09:07 +02:00
discourse-patreon DEV: Drop jquery in patreon plugin (#41425) 2026-07-03 17:13:54 +01:00
discourse-policy I18N: Update translations (#40823) 2026-06-12 16:19:35 +02:00
discourse-post-voting SECURITY: Reviewable conversations expose post-voting flag PM excerpts to category moderators outside the PM (#41527) 2026-07-07 15:37:22 -05:00
discourse-presence SECURITY: Authorization bypass in wiki edit presence leaks editor identities (#41474) 2026-07-06 12:53:23 -05:00
discourse-reactions UX: show emoji name when hovering post reactions (#41500) 2026-07-07 09:54:20 +04:00
discourse-rewind DEV: Bump eslint/lint-configs, and correct violations (#41321) 2026-07-01 10:39:57 +01:00
discourse-rss-polling I18N: Update translations (#41509) 2026-07-08 16:18:53 +02:00
discourse-solved I18N: Update translations (#41509) 2026-07-08 16:18:53 +02:00
discourse-subscriptions DEV: Bump eslint/lint-configs, and correct violations (#41321) 2026-07-01 10:39:57 +01:00
discourse-templates FIX: Support unloaded categories in template topic options (#41230) 2026-06-29 14:35:07 +08:00
discourse-topic-voting DEV: Bump prettier-plugin-ember-template-tag and reformat (#41489) 2026-07-06 19:18:44 +01:00
discourse-user-notes I18N: Update translations (#40680) 2026-06-09 17:21:49 +02:00
discourse-workflows FEATURE: Show workflow expression references as editable pills (#41442) 2026-07-08 12:02:11 +02:00
discourse-zendesk-plugin
footnote UX: prevent nested footnotes (#41325) 2026-07-02 19:55:10 +02:00
poll DEV: add clean_up_inactive_users_query modifier for plugins to extend query for inactive users (#41372) 2026-07-06 09:39:11 -07:00
spoiler-alert FIX: Allow re-blur on spoiler when in details view (#41266) 2026-06-29 12:47:49 -05:00
styleguide DEV: Minor fixes to everyone-based permissions for granular_anonymous_and_logged_in_groups_permissions (#41459) 2026-07-07 09:38:56 +10:00