Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://gh.wpcy.net/https://github.com/discourse/discourse.git synced 2026-06-17 09:08:31 +08:00
Code Packages Activity Actions
discourse/app
History
Exact
Guo Xiang Tan 477bacb3ae SECURITY: XSS when displaying watched words in admin panel. 
The XSS here is only possible if CSP is disabled. Low impact since CSP
is enabled by default in SiteSettings.
2019-07-15 10:58:52 +08:00
..
assets SECURITY: XSS when displaying watched words in admin panel. 2019-07-15 10:58:52 +08:00
controllers DEV: Respond with error 400 to uploads requested via XHR 2019-06-27 11:30:05 +02:00
helpers replace subfolder on cdn url conversion between general cdn and s3 (#7764) 2019-06-17 11:51:17 -07:00
jobs FIX: Don't send notification email when user isn't allowed to see topic 2019-07-02 09:05:36 +10:00
mailers SECURITY: Strip HTML from invite emails 2019-07-05 14:58:46 -04:00
models SECURITY: SQL injection with default categories 2019-07-11 13:53:12 -04:00
serializers FIX: In reply to would sometimes have a broken link 2019-06-10 11:33:10 -04:00
services FIX: iterate when clearing watched words cache 2019-07-04 08:59:01 -07:00
views SECURITY: Add confirmation screen when logging in via email link 2019-06-17 18:20:48 +01:00