Shlomo 5ae8d553ed fix: disallow inline viewing of unsafe files (#13833)

2025-12-15 13:16:38 -05:00

..

activitypub.js

fix: update activitypubFilterList logic so that it is also checked on resolveInbox and ActivityPub.get methods, updated instances.isAllowed to no longer return a promise

2025-09-19 10:56:35 -04:00

admin.js

refactor: remove "password" in comments

2024-12-09 14:40:49 -05:00

assert.js

fix: backend logic fixes for #12853

2024-10-16 15:22:49 -04:00

csrf.js

feat: add back support for req.body._csrf

2023-05-27 16:46:04 -04:00

expose.js

test: middleware/expose.js

2021-11-22 19:56:12 -05:00

header.js

fix: #12227, fix crash in redirect

2023-12-13 13:18:07 -05:00

headers.js

Chat with privileged (#12092)

2023-10-17 13:19:25 -04:00

helpers.js

add roomId class to body

2023-07-13 20:01:39 -04:00

index.js

fix: disallow inline viewing of unsafe files (#13833)

2025-12-15 13:16:38 -05:00

maintenance.js

fix: #11426, proper v3 style error on maintenance mode [breaking]

2023-04-14 11:59:15 -04:00

multer.js

lint: fix lint

2025-10-24 11:27:43 -04:00

ratelimit.js

chore: eslint prefer-template

2021-02-08 18:06:44 -05:00

render.js

fix: renderOverride to not clobber url if already set in template data

2025-11-05 13:43:04 -05:00

uploads.js

set max on upload rate limit

2025-07-20 13:38:31 -04:00

user.js

fix: log out user if session cookie resolves to non-existent uid

2025-11-10 11:55:19 -05:00