0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
discourse/app
Penar Musaraj 473288219e SECURITY: Do not leak PM post edits to moderators
The Post Edits admin report (/admin/reports/post_edits) leaked the first
40 characters of raw post content from private messages and secure
categories to moderators who shouldn't have access.
2026-03-19 15:21:28 +00:00
..
assets UX: Allow upload placeholder text to wrap on long translations (#38712) 2026-03-19 14:18:44 +01:00
controllers SECURITY: Do not leak PM post edits to moderators 2026-03-19 15:21:28 +00:00
helpers DEV: Extract embed post date title into i18n-aware helper (#38594) 2026-03-17 09:12:21 -05:00
jobs UX: include post ID in user data export (#38129) 2026-03-16 09:54:56 -04:00
mailers DEV: Strip unsubscribe links when sending digest previews to arbitrary addresses (#38298) 2026-03-05 13:58:51 -06:00
models SECURITY: Do not leak PM post edits to moderators 2026-03-19 15:21:28 +00:00
queries/reports UX: Admin dashboard & reports improvements (#37598) 2026-02-24 09:20:38 +08:00
serializers SECURITY: XSS in review queue via highlightWatchedWords 2026-03-19 15:21:28 +00:00
services SECURITY: Enforce edit permissions and audit trail in TriggerPostAction 2026-03-19 15:21:28 +00:00
views DEV: Extract embed post date title into i18n-aware helper (#38594) 2026-03-17 09:12:21 -05:00