David Taylor 68b4fe4cf8 SECURITY: Expand and improve SSRF Protections (#18815) ...

See https://github.com/discourse/discourse/security/advisories/GHSA-rcc5-28r3-23rr

Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com>
Co-authored-by: Daniel Waterworth <me@danielwaterworth.com>

2022-11-01 16:33:17 +00:00

..

000-development_reload_warnings.rb

DEV: Avoid $ globals (#15453)

2022-01-08 23:39:46 +01:00

000-mini_sql.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

000-post_migration.rb

FIX: Migration paths were being forgotten

2019-12-16 14:13:47 -05:00

000-trace_pg_connections.rb

DEV: Correctly tag heredocs (#16061)

2022-02-28 20:50:55 +01:00

000-zeitwerk.rb

SECURITY: Expand and improve SSRF Protections (#18815)

2022-11-01 16:33:17 +00:00

001-redis.rb

DEV: Remove old redis option (#17427)

2022-07-11 22:15:30 +02:00

002-freedom_patches.rb

FIX: deprecation warning - initialization autoloaded the constant (#12400)

2021-03-16 09:47:57 +11:00

002-rails_failover.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

004-message_bus.rb

DEV: Drop enable_long_polling and long_polling_interval settings (#16323)

2022-03-30 16:32:40 +08:00

005-site_settings.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

006-ensure_login_hint.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

006-mini_profiler.rb

DEV: Rename secure_media to secure_uploads (#18376)

2022-09-29 09:24:33 +10:00

008-rack-cors.rb

FEATURE: Cache CORS preflight requests for 2h (#14614)

2021-10-14 22:37:53 -03:00

009-omniauth.rb

DEV: Drop legacy OpenID 2.0 support (#8894)

2020-02-07 17:32:35 +00:00

012-web_hook_events.rb

FEATURE: adds the user_promoted event to webhooks (#15996)

2022-02-22 10:57:18 +01:00

013-excon_defaults.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

014-track-setting-changes.rb

FIX: Invalidate site settings cache in all instances (#16155)

2022-03-11 17:16:56 +02:00

099-anon-cache.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

099-drain_pool.rb

DEV: Remove custom connection reaper.

2020-05-26 09:09:46 +08:00

100-i18n.rb

FIX: Ensure 100-logster initializer is run before 101-lograge (#12455)

2021-03-19 19:51:13 +00:00

100-logster.rb

DEV: Fix typos and outdated comments (#16614)

2022-05-04 14:12:18 +08:00

100-oj.rb

DEV: default Oj to compat mode

2020-01-16 07:52:28 +11:00

100-onebox_options.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

100-push-notifications.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

100-quiet_logger.rb

DEV: Increase log levels for more assets/static paths.

2020-09-01 09:52:50 +08:00

100-secret_token.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

100-session_store.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

100-sidekiq.rb

DEV: Fix not being able to boot Sidekiq server in development (#16696)

2022-05-11 10:38:11 +08:00

100-silence_logger.rb

DEV: stop freezing frozen strings

2020-04-30 16:48:53 +10:00

100-strong_parameters.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

100-verify_config.rb

DEV: Correctly tag heredocs (#16061)

2022-02-28 20:50:55 +01:00

100-wrap_parameters.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

101-lograge.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

200-first_middlewares.rb

DEV: Auto-allow multisite hosts in dev (#17246)

2022-06-27 21:58:33 +02:00

300-perf.rb

FEATURE: add hook after all initializers

2019-08-26 10:49:26 +10:00

400-deprecations.rb

FIX: use Redis replica host and port (#11566)

2020-12-23 13:14:19 +11:00

assets.rb

DEV: Remove support for legacy plugin JS compilation pipeline (#18293)

2022-09-21 12:38:02 +01:00

filter_parameter_logging.rb

DEV: Upgrade to Rails 7

2022-04-28 11:51:03 +02:00

new_framework_defaults_7_0.rb

DEV: Use new defaults for ActiveSupport::Digest

2022-05-18 16:51:07 +02:00