Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/app
History
Exact
discoursebot 408c3162a1
 SECURITY: Limit Category search term and word count [backport 2026.5] (#41596) 
Backport of #41588 to release/2026.5.

---

#### Description

Category search accepted an unbounded term from anonymous requests and
expanded every whitespace-separated word into an ILIKE predicate. Large
terms could generate expensive SQL and tie up request workers.


#### Fix

Cap the total term length and the number of words used for SQL filters.

Co-authored-by: jdmartinez1062 <juan@discourse.org>
2026-07-31 19:14:59 -05:00
..
assets UX: Remove new height variables from foundation modernization [backport 2026.5] (#41986) 2026-07-23 11:11:46 -05:00
controllers SECURITY: Limit Category search term and word count [backport 2026.5] (#41596) 2026-07-31 19:14:59 -05:00
helpers SECURITY: Prevent cache poisoning/XSS via color scheme cookies [backport 2026.5] 2026-07-28 17:03:00 +02:00
jobs SECURITY: Prevent any signed AWS SNS TopicARN from being accepted via webhooks [backport 2026.5] 2026-06-30 16:17:06 +02:00
mailers DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
models SECURITY: Prevent cache poisoning/XSS via color scheme cookies [backport 2026.5] 2026-07-28 17:03:00 +02:00
queries/reports FIX: Enforce can_see_ip checks across admin IP features (#40019) 2026-05-19 11:37:20 +08:00
serializers SECURITY: Stop exposing hidden tag names through category serializers [backport 2026.5] 2026-07-28 17:03:00 +02:00
services SECURITY: Stop exposing hidden tag names through category serializers [backport 2026.5] 2026-07-28 17:03:00 +02:00
views DEV: Drop media-minmax polyfill (#40335) 2026-05-27 20:26:21 +01:00