Martin Brennan 2583aedd42

FIX: Change additional public uploads to not be secure (#8738) ...

Custom emoji, profile background, and card background were being set to secure, which we do not want as they are always in a public context and result in a 403 error from the ACL if linked directly.

2020-01-17 13:16:27 +10:00

..

backup_restore

FEATURE: Drop "backup" schema 7 days after restore

2020-01-16 17:48:47 +01:00

compression

DEV: Split max decompressed setting for themes and backups (#8179)

2019-10-11 14:38:10 -03:00

content_security_policy

FEATURE: allow plugins and themes to extend the default CSP (#6704)

2018-11-30 09:51:45 -05:00

i18n

FIX: English locale must not fall back to any other locale

2019-06-07 21:53:01 +02:00

seed_data

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

site_settings

FIX: Allow secure uploads if global s3 setting active and enable_s3_uploads validations (#8373)

2019-11-20 07:46:44 +10:00

validators

FEATURE: Add timezone to core user_options (#8380)

2019-11-25 10:49:27 +10:00

webauthn

SECURITY: 2FA with U2F / TOTP

2020-01-15 11:27:12 +01:00

browser_detection_spec.rb

FIX: Detect DiscourseHub user agent.

2019-08-09 11:58:15 +03:00

content_security_policy_spec.rb

DEV: Remove unsafe-eval from development CSP (#8569)

2019-12-30 12:17:12 +00:00

db_helper_spec.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

encodings_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

introduction_updater_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

mini_sql_multisite_connection_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

search_spec.rb

FIX: skip invalid URLs when checking for audio/video in search blurbs

2019-11-06 10:32:15 -05:00

theme_javascript_compiler_spec.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

upload_creator_spec.rb

FIX: Change additional public uploads to not be secure (#8738)

2020-01-17 13:16:27 +10:00

upload_recovery_spec.rb

DEV: disable all upload recovery specs

2019-11-11 16:04:18 +11:00