Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/frontend
History
Exact
OsamaSayegh d92973e51a SECURITY: Escape second factor name in delete confirmation dialog [backport 2026.4] 
Backport of #759 to release/2026.4.

---

Advisory: https://github.com/discourse/discourse/security/advisories/GHSA-wg5x-7f23-m3r5

Dev topic: https://dev.discourse.org/t/stored-xss-in-2fa-delete-confirmation-modal/185684
2026-06-30 16:16:31 +02:00
..
asset-processor DEV: Replace memfs with a in-repo fs helper (#39571) 2026-04-27 11:00:54 +02:00
custom-proxy DEPS: Bump glob from 13.0.0 to 13.0.6 (#38191) 2026-03-04 12:29:35 +01:00
deprecation-silencer DEV: Remove (again) the old non-rollup plugin compiler (#39419) 2026-04-21 21:07:46 +02:00
discourse SECURITY: Escape second factor name in delete confirmation dialog [backport 2026.4] 2026-06-30 16:16:31 +02:00
discourse-i18n DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
discourse-markdown-it FIX: Escape markdown characters in upload filenames (#39133) 2026-04-14 10:37:41 +02:00
discourse-types DEPS: Bump @types/node from 25.0.10 to 25.3.3 in the types group (#38391) 2026-03-10 11:12:22 +01:00
ember-cli-progress-ci DEV: Rename app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
pretty-text DEPS: Bump ember-cli from 6.11.2 to 6.12.0 (#39361) 2026-04-20 11:48:58 +02:00
.npmrc DEV: Rename app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00
polyfills.js DEV: Rename app/assets/javascripts/ -> frontend/ 2025-10-22 16:24:11 +01:00