Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-assign
History
Exact
Sérgio Saquetim e227a5d4d3 SECURITY: Stored XSS via unescaped assignee name [backport 2026.1] 
Backport of #578 to the release/2026.1 branch.

See the original PR for full details.

---

**Security Advisory:** https://github.com/discourse/discourse/security/advisories/GHSA-xg68-q7ff-6gqm
2026-03-31 15:12:50 +01:00
..
app DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
assets SECURITY: Stored XSS via unescaped assignee name [backport 2026.1] 2026-03-31 15:12:50 +01:00
config I18N: Update translations (#37916) 2026-02-25 09:47:58 -05:00
db/migrate
lib DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
spec FIX: Allow Enter key to work inside select-kit within modals (#36596) 2025-12-11 10:41:32 +01:00
svg-icons
test/javascripts SECURITY: Stored XSS via unescaped assignee name [backport 2026.1] 2026-03-31 15:12:50 +01:00
package.json DEV: Overhaul typechecking configuration (#35794) 2025-11-12 12:54:34 +00:00
plugin.rb DEV: Remove obsolete feature checks (#36175) 2025-11-23 20:57:46 +01:00
README.md
tsconfig.json DEV: Overhaul typechecking configuration (#35794) 2025-11-12 12:54:34 +00:00

README.md

Assign Plugin

Allows you to assign topics and individual posts (both private and public) to a user or group.

For more information, please see: https://meta.discourse.org/t/discourse-assign/58044