docbrown/app
Jeremy Friesen a3441a318d
Adding ugc role to untrusted profile URLs (#15520)
Prior to this commit, we trusted all user profiles.  There are folks
using DEV.to profiles to help with their spam efforts.

With this commit, we're trying to thwart their efforts.

Closes forem/rfcs#334
2021-11-29 17:54:09 -05:00
..
assets Add markdown toolbar to V2 editor (#15347) 2021-11-29 07:50:17 +00:00
black_box Make Rubocop happy again (#14729) 2021-09-14 09:15:01 -05:00
components/admin/users Small change to make the tools section of member details mobile friendly. (#15159) 2021-10-22 18:47:20 +02:00
controllers Instrumentation: adding tags to data tracing (#15517) 2021-11-29 14:53:56 -05:00
decorators Theming cleanup (#15237) 2021-11-09 10:11:55 -05:00
errors Guarding against spam from OAuth Sources (#15404) 2021-11-18 16:26:39 -05:00
helpers Enable Forem (Passport) Auth (#15141) 2021-11-23 14:59:00 -06:00
javascript Remove extra script tag from embedded gists to prevent them from mixing up (#14674) 2021-11-29 15:48:20 -05:00
lib ✂✂✂ Remove Connect (#14734) 2021-11-18 08:21:00 -06:00
liquid_tags complete changes (#15420) 2021-11-18 14:19:45 -05:00
mailers ✂✂✂ Remove Connect (#14734) 2021-11-18 08:21:00 -06:00
models Adding ugc role to untrusted profile URLs (#15520) 2021-11-29 17:54:09 -05:00
policies ✂✂✂ Remove Connect (#14734) 2021-11-18 08:21:00 -06:00
queries Adds validations to avoid creating unnecessary PNs (#14621) 2021-08-31 15:00:30 -06:00
refinements Drop profile columns from user (#10707) 2020-12-03 08:14:38 +07:00
sanitizers Remove redundant freeze calls (#14596) 2021-08-26 10:01:08 -04:00
serializers ✂✂✂ Remove Connect (#14734) 2021-11-18 08:21:00 -06:00
services Configurable weighted feed strategy (#15240) 2021-11-29 10:46:56 -05:00
uploaders ✂✂✂ Remove events (#15062) 2021-10-15 09:31:08 -04:00
validators Updating valid domain registration (#15436) 2021-11-19 10:05:00 -05:00
view_objects Upgrade to Ruby 3.0.2 (#12103) 2021-08-25 14:26:33 -04:00
views Adding ugc role to untrusted profile URLs (#15520) 2021-11-29 17:54:09 -05:00
workers Guarding against missing experiments (#15440) 2021-11-22 16:06:32 -05:00