discourse-mirrors/discourse-follow
0
0
Fork 0
mirror of https://ghfast.top/https://github.com/discourse/discourse-follow.git synced 2026-07-15 11:36:38 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
A Discourse plugin that lets you follow other users.
327 commits 10 branches 0 tags 1.4 MiB
Find a file
Exact
discourse-patch-triage[bot] 3cd46af512
SECURITY: Follow feed exposes shared draft topic titles to followers [backport 2026.6] (#190) 
Backport of #187 to d-compat/2026.6.

---

## Summary

Prevent the leakage of shared draft topic titles and post content in the follow feed by correctly filtering out topics with associated shared drafts for unauthorized users. The query now explicitly checks the viewer's shared draft visibility before returning posts from followed users.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1405

Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-10 09:57:55 -05:00
.github/workflows DEV: Add the d-compat branch workflow (#171) 2026-03-10 19:08:28 +00:00
app SECURITY: Follow feed exposes shared draft topic titles to followers [backport 2026.6] (#190) 2026-07-10 09:57:55 -05:00
assets FIX: Allow users to unfollow suspended/staged/bot users (#176) 2026-03-31 11:36:41 +02:00
config I18N: Update translations (#182) 2026-06-01 21:00:01 +02:00
db/migrate DEV: Introduce syntax_tree for ruby formatting (#78) 2022-12-29 13:31:48 +01:00
lib/follow FIX: Allow users to unfollow suspended/staged/bot users (#176) 2026-03-31 11:36:41 +02:00
spec SECURITY: Follow feed exposes shared draft topic titles to followers [backport 2026.6] (#190) 2026-07-10 09:57:55 -05:00
svg-icons UX: Add custom icons for the plugin notification types (#12) 2021-10-07 20:34:07 +03:00
test/javascripts/acceptance DEV: Update linting (#172) 2026-03-13 12:35:12 +00:00
.discourse-compatibility DEV: Pin version for Discourse < 2026.2.0-latest (#169) 2026-02-11 16:43:03 +01:00
.gitignore DEV: Update linting and add types (#167) 2026-01-28 11:49:36 +00:00
.npmrc DEV: Switch to use pnpm (#126) 2024-10-14 13:40:07 +02:00
.prettierrc.cjs DEV: Update linting (#105) 2023-12-13 20:25:04 +01:00
.rubocop.yml DEV: Introduce syntax_tree for ruby formatting (#78) 2022-12-29 13:31:48 +01:00
.streerc DEV: Introduce syntax_tree for ruby formatting (#78) 2022-12-29 13:31:48 +01:00
.template-lintrc.cjs DEV: Update linting (#105) 2023-12-13 20:25:04 +01:00
COPYRIGHT.txt Add license and copyright 2020-01-08 13:46:56 +11:00
eslint.config.mjs DEV: Update eslint config (#131) 2024-11-19 11:21:38 +01:00
Gemfile DEV: Introduce syntax_tree for ruby formatting (#78) 2022-12-29 13:31:48 +01:00
Gemfile.lock DEV: Update linting (#175) 2026-03-27 14:05:11 +01:00
LICENSE.txt Add license and copyright 2020-01-08 13:46:56 +11:00
package.json DEV: Update linting (#175) 2026-03-27 14:05:11 +01:00
plugin.rb FIX: Allow users to unfollow suspended/staged/bot users (#176) 2026-03-31 11:36:41 +02:00
pnpm-lock.yaml DEV: Update linting (#175) 2026-03-27 14:05:11 +01:00
README.md Update README content (#36) 2021-10-13 12:38:12 +03:00
stylelint.config.mjs DEV: Update linting (#146) 2025-03-13 15:11:05 +00:00
translator.yml DEV: Plugin cleanup (#1) 2021-10-07 20:34:07 +03:00
tsconfig.json DEV: Update linting and add types (#167) 2026-01-28 11:49:36 +00:00

README.md

Discourse Follow

This Discourse plugin allows you to follow other users, list the latest topics involving them and receive notifications when they post.

Installation guide, plugin documentation, screenshots and more details can be found in the plugin's topic on Discourse Meta. Please submit bug reports and feature requests over there as well.

This plugin is an official plugin maintained by the Discourse team (CDCK, Inc).

Credits

This plugin was originally developed by Pavilion and maintained by them until October 2021 when maintenance was transferred to the Discourse team.