0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-05 13:59:03 +08:00
discourse/spec
2026-07-31 22:01:41 +01:00
..
db
fabricators
fixtures
generator
helpers SECURITY: Bind shared session key to auth token and enforce user gates [backport 2026.6] (#41643) 2026-07-14 13:25:29 +08:00
import_export
initializers
integration
integrity
jobs SECURITY: Authorize secure-upload hotlink downloads against post user 2026-06-30 16:10:52 +02:00
lib SECURITY: Onebox iframe origin allowlist enforces URL authority boundary [backport 2026.6] 2026-07-31 22:01:41 +01:00
mailers
migrations
models FIX: Skip dominant color calculation when the upload file is missing [backport 2026.6] (#42167) 2026-07-30 16:58:07 +01:00
multisite
queries/reports
requests SECURITY: HTML injection in PrettyText.format_for_email from cooked-attribute reparsing [backport 2026.6] 2026-07-31 22:01:41 +01:00
script
serializers SECURITY: Stop exposing hidden tag names through category serializers [backport 2026.6] 2026-07-28 17:05:36 +02:00
services SECURITY: Stale featured rows expose unlisted topic content [backport 2026.6] (#41811) 2026-07-17 09:38:33 -05:00
support
system SECURITY: Stored XSS in staff action logs injects staff UI [backport 2026.6] 2026-07-28 17:05:36 +02:00
tasks
views
rails_helper.rb
regenerate_swagger_docs
swagger_helper.rb