discourse/plugins/chat/spec
Martin Brennan 6aae74d082
SECURITY: Rich editor chat transcript XSS
When quoting from a channel or a thread, the title
of the channel and the title of the thread could be
an XSS vector when CSP is disabled.
2025-09-30 10:09:43 +08:00
..
components/chat DEV: fix flakey spec (#34875) 2025-09-19 11:40:15 +02:00
fabricators FEATURE: disable chat DM threads by default (#34840) 2025-09-17 16:52:13 +04:00
integration DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
jobs DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
lib FIX: supports html entities in chat (#34591) 2025-08-28 07:34:24 +02:00
mailers DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
models FEATURE: disable chat DM threads by default (#34840) 2025-09-17 16:52:13 +04:00
queries/chat DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
requests DEV: Unify ListChannelMessages/ListChannelThreadMessages behaviors 2025-08-25 13:48:02 +02:00
serializer DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
services FEATURE: disable chat DM threads by default (#34840) 2025-09-17 16:52:13 +04:00
support DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00
system SECURITY: Rich editor chat transcript XSS 2025-09-30 10:09:43 +08:00
validators FEATURE: Add setting to prevent anonymous users from using chat (#31842) 2025-03-21 13:32:52 +03:00
plugin_helper.rb FIX: remove complicated 'chat_duplicate_message_sensitivity' site setting (#30516) 2025-01-13 12:32:51 +01:00
plugin_spec.rb DEV: add shortcut fab!(:variable, :fabricator) to specs (#33577) 2025-07-11 11:16:34 -03:00