Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 01:06:53 +08:00
Code Packages Activity Actions
discourse/app
History
Exact
Gabriel Grubba 4dbaafd291
 FIX: Ignore title parameter during public signup (#41381) 
Public account creation accepted `title` from non-admin signup requests,
allowing a new user to assign themselves an arbitrary visible profile
title before normal title authorization checks could apply.

Ignore `title` for non-admin account creation, matching the existing
treatment of primary/flair group parameters. Admin API user creation
remains unchanged.

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-03 11:39:58 -03:00
..
assets UX: fix topic title edit aligments (#41417) 2026-07-03 13:00:11 +02:00
controllers FIX: Ignore title parameter during public signup (#41381) 2026-07-03 11:39:58 -03:00
helpers FEATURE: Show bounce rate and average session duration on the dashboard (#40936) 2026-07-03 10:49:32 +08:00
jobs FEATURE: Show bounce rate and average session duration on the dashboard (#40936) 2026-07-03 10:49:32 +08:00
mailers FEATURE: Log in with a one-time email code (#40804) 2026-06-17 12:34:48 -07:00
models SECURITY: Restrict user action removal messages (#41405) 2026-07-03 17:56:04 +08:00
queries/reports DEV: Remove reporting_improvements upcoming change (#41259) 2026-07-01 07:52:02 +08:00
serializers FIX: Redirect upcoming change notifications to What's New when permanent (#41385) 2026-07-03 15:28:21 +10:00
services FEATURE: Show bounce rate and average session duration on the dashboard (#40936) 2026-07-03 10:49:32 +08:00
views FIX: improve the reliability of chat sounds (#41373) 2026-07-02 18:52:41 -04:00