Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/plugins
History
Exact
Penar Musaraj 472f9e1f78 SECURITY: Sanitize graphviz SVG anchor links to prevent XSS 
Graphviz can generate SVG output with anchor elements containing
arbitrary URLs specified by users. This change implements server-side
sanitization to allow only http and https URLs.
2026-03-19 15:21:28 +00:00
..
automation I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
chat I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
checklist DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-adplugin I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-affiliate DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-ai SECURITY: Stored XSS via Shared AI Conversation Onebox 2026-03-19 15:21:28 +00:00
discourse-apple-auth DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-assign UX: Update copy for topic bulk actions (#38714) 2026-03-19 22:23:39 +08:00
discourse-cakeday I18N: Update translations (#38529) 2026-03-12 09:41:30 +01:00
discourse-calendar FEAT: add all_day option to calendar events (#38511) 2026-03-18 11:29:30 -05:00
discourse-chat-integration I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-data-explorer I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-details UX: keep rich editor details open but serialize as closed (#38369) 2026-03-11 10:52:07 -03:00
discourse-gamification DEV: Promote old post-deploy migrations to pre-deploy (#38595) 2026-03-13 19:09:30 +00:00
discourse-github I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-graphviz SECURITY: Sanitize graphviz SVG anchor links to prevent XSS 2026-03-19 15:21:28 +00:00
discourse-hcaptcha DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-lazy-videos DEV: Rename htmlSafe to trustHTML from @ember/template (#38465) 2026-03-11 18:57:22 -03:00
discourse-local-dates I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-login-with-amazon I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-lti I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-math I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-microsoft-auth I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-narrative-bot I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-oauth2-basic I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-openid-connect I18N: Update translations (#38272) 2026-03-10 09:52:23 +01:00
discourse-patreon DEV: Rename htmlSafe to trustHTML from @ember/template (#38465) 2026-03-11 18:57:22 -03:00
discourse-policy SECURITY: Validate policy permissions on post save 2026-03-19 15:21:28 +00:00
discourse-post-voting I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-presence DEV: Rename htmlSafe to trustHTML from @ember/template (#38465) 2026-03-11 18:57:22 -03:00
discourse-reactions I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-rewind I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-rss-polling DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-solved SECURITY: add visibility check for solved endpoints 2026-03-19 15:21:28 +00:00
discourse-subscriptions I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-templates DEV: Fix stale element race condition in templates panel page object (#38444) 2026-03-10 12:29:41 -07:00
discourse-topic-voting I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
discourse-user-notes SECURITY: Unauthorized Post Data Exposure in discourse-user-notes Plugin 2026-03-19 15:21:28 +00:00
discourse-zendesk-plugin SECURITY: Block ticket creation when user can't see the topic 2026-03-19 15:21:28 +00:00
footnote I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00
poll SECURITY: Fix poll post_id array authorization bypass 2026-03-19 15:21:28 +00:00
spoiler-alert DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
styleguide I18N: Update translations (#38683) 2026-03-18 12:06:56 +01:00