Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-05 18:09:26 +08:00
Code Packages Activity Actions
discourse/frontend
History
Exact
OsamaSayegh 529e17d4d5 SECURITY: Escape second factor name in delete confirmation dialog [backport 2026.1] 
Backport of #759 to release/2026.1.

---

Advisory: https://github.com/discourse/discourse/security/advisories/GHSA-wg5x-7f23-m3r5

Dev topic: https://dev.discourse.org/t/stored-xss-in-2fa-delete-confirmation-modal/185684
2026-06-30 16:27:06 +02:00
..
asset-processor DEPS: Bump postcss-js from 5.0.2 to 5.0.3 (#36895) 2026-01-13 19:37:51 +01:00
custom-proxy DEV: Upgrade to pnpm v10 (#36289) 2026-01-12 10:43:06 +00:00
deprecation-silencer DEV: Upgrade to pnpm v10 (#36289) 2026-01-12 10:43:06 +00:00
discourse SECURITY: Escape second factor name in delete confirmation dialog [backport 2026.1] 2026-06-30 16:27:06 +02:00
discourse-i18n FIX: Dasherize locale correctly for messageformat setup (#37268) 2026-01-22 13:36:59 +00:00
discourse-markdown-it FIX: incorrect emoji escaping (#37100) 2026-01-14 10:51:26 +01:00
discourse-plugins DEPS: Bump ember-template-imports from 4.3.0 to 4.4.0 (#36934) 2026-01-13 19:36:37 +01:00
discourse-types DEV: Upgrade to pnpm v10 (#36289) 2026-01-12 10:43:06 +00:00
ember-cli-progress-ci
pretty-text SECURITY: Disallow URL-encoded path traversal in iframe URLs 2026-03-19 15:46:24 +00:00
.npmrc
polyfills.js