evazion
bd6ebceda3
Refactor post_approvers_only to approver_only.
...
Don't duplicate code with post_approvers_only; use the approver_only?
method dynamically defined in `User::Roles.each do ... end`.
2016-10-14 05:04:40 +00:00
evazion
d84184b5f1
Prevent anon/banned/member users from voting ( fix #2719 ).
...
There was a regression in 6d6d00b; `before_filter :voter_only` was a
no-op in the post vote controller because it merely returned false,
which does not halt the request. The fix is to arrange for a voter_only
method to be defined that properly redirects to the access denied page.
2016-10-14 04:47:51 +00:00
Albert Yi
eaa0426c36
Merge pull request #2714 from evazion/fix-2704
...
Fix mass assignment vuln to tag alias/implication status (partial fix for #2704 ).
2016-10-11 17:48:26 -07:00
evazion
7e3284c87f
Fix mass assignment vuln to tag alias/implication status (2704).
2016-10-11 08:20:28 +00:00
evazion
c46b31aa9c
Prevent reverting to foreign versions ( fixes #2711 ).
2016-10-11 06:57:46 +00:00
evazion
8c8f4a6a8f
Fix mass assignment vuln in comment update action ( #2704 ).
...
Prevents mass assignment of `post_id`, `do_not_bump_post`, and
`is_deleted`.
2016-10-06 09:39:57 +00:00
r888888888
ebff27c7c0
fixes #2700 : Unvote Missing Template Exception
2016-10-04 14:42:48 -07:00
r888888888
643d06dcff
remove reference to janitor_only
2016-09-29 11:54:49 -07:00
r888888888
5b48d272f2
add basic user revert functionality
2016-09-28 11:38:34 -07:00
r888888888
fc7afd44ea
refactor source pixiv test
...
refactor pixiv download tests
refactor upload test
refactor nico seiga test
refactor twitter tests
2016-09-28 11:25:29 -07:00
r888888888
800f7d9e5f
fix invalid reference to request.request_uri
2016-09-23 15:30:17 -07:00
r888888888
09ec2dfc08
remove anti voters, extend post vote lifetime to 90 days, add minimum score threshold for super voters
2016-09-23 11:03:09 -07:00
r888888888
b2e6a8f031
add antivoters (no behavior yet)
2016-09-19 16:47:55 -07:00
r888888888
bf2246f895
move vote similarity code into danbooru, add listing for super voters
2016-09-19 16:43:29 -07:00
Type-kun
a718560554
Initial support for #2677
2016-09-17 16:42:00 +05:00
r888888888
62582cb994
remove false constraint
2016-09-13 01:14:32 -07:00
r888888888
76c1712989
account for nothing left to moderate
2016-09-12 16:20:08 -07:00
r888888888
5d1bc8726a
make moderated cookie permanent
2016-09-12 13:06:09 -07:00
r888888888
70fef49e81
add saved search category change ui
2016-09-11 01:37:10 -07:00
r888888888
2c80d7b82e
more intelligent notice for mod queue
2016-09-09 15:08:23 -07:00
r888888888
3542ffe1f7
refactor inactive janitor notice
2016-09-09 14:30:35 -07:00
r888888888
1682196490
fix role
2016-09-08 16:02:51 -07:00
r888888888
de34c7fca3
fixes #2650 : Add random mode to mod queue
2016-09-08 15:55:06 -07:00
r888888888
310538dd71
implement post version search report in danbooru (probably broken)
2016-09-06 18:02:58 -07:00
r888888888
73d62bbc01
expose mod dashboard to all users
2016-08-30 15:14:46 -07:00
r888888888
929d6e7ec5
add glob patten for missing routes
2016-08-30 14:42:01 -07:00
r888888888
f41c362bf4
keep better track of per-user ip addrs
2016-08-24 15:58:22 -07:00
r888888888
122970bc11
fixes #2620 : Users who logged in securely should always be redirected to the HTTPS version of Danbooru
2016-07-18 16:48:10 -07:00
r888888888
f138eeef1d
fixes #2619 : Delete password_hash cookie on sign out
2016-07-11 16:38:00 -07:00
r888888888
14d73d0622
add member only constraint for migrating tag subscriptions
2016-06-24 14:11:44 -07:00
r888888888
a8812beae8
enable ragel parser in more places
2016-06-22 16:31:25 -07:00
r888888888
945a451ca2
fix typo
2016-06-21 13:40:11 -07:00
r888888888
2ce86ecb8b
add support for post version queries
2016-06-21 13:14:27 -07:00
r888888888
4622656abb
add link for migrating tag subscription to saved search
2016-06-15 13:39:53 -07:00
r888888888
55494c30bb
show error messages on bur failures
2016-06-15 13:03:29 -07:00
r888888888
df9b53715f
fixes #2599 : Show more info when a BUR is approved/rejected
2016-06-14 10:45:15 -07:00
r888888888
cab6768b4b
fix bug with approving bulk update requests
2016-06-12 17:34:13 -07:00
r888888888
110569708e
fix tests
2016-05-26 13:17:18 -07:00
r888888888
30415d9e1e
add approver field to aliases/implications
2016-05-26 13:01:44 -07:00
r888888888
667f912093
fixes #2590 : Approving implication creates forum post under "albert" instead of actual approver
2016-04-25 16:48:53 -07:00
r888888888
6d6d00b190
expose voting to non-gold supervoters
2016-03-14 16:52:49 -07:00
r888888888
caf4a28b02
enable user privacy mode for displaying favorites
2016-02-22 12:18:19 -08:00
r888888888
40957e04fd
base listbooru refresh on user login
2016-02-17 17:02:35 -08:00
r888888888
d75546a4e4
add secondary validations to aliases+implications+requests
2016-02-11 11:48:56 -08:00
r888888888
fe4cb7f3ba
track searches that return no results
2016-02-02 16:25:14 -08:00
r888888888
b8f14b6fee
hide more pages for banned artists #2132
2016-01-27 17:06:13 -08:00
r888888888
9d3d7abedc
add support for read only post queries
2016-01-25 16:40:23 -08:00
r888888888
5fa1b7cb12
fix related tag update
2016-01-04 11:04:28 -08:00
r888888888
7efeb5829d
fix syntax error
2016-01-03 12:43:39 -08:00
r888888888
04926ae0c6
add api endpoint for updating a tag's related tags
2016-01-03 00:02:37 -08:00