jaculabilis/danbooru
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Files
ef0d8151d82df2dbff826bd07fa3a93c57b31e85
danbooru/app/policies
History
evazion b695c4ccb1 modreports: fix private user information leak in new modreport action. 
Fix this:

    https://danbooru.donmai.us/moderation_reports/new.json?moderation_report[model_id]=52664&moderation_report[model_type]=User

raising an `undefined method `reportable?' for #<UserPolicy ...>`
exception, which contained the full user object in the error message,
which leaked private user information.
2022-02-06 14:39:08 -06:00
..
api_key_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
application_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
artist_commentary_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
artist_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
artist_version_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
background_job_policy.rb
jobs: hide job arguments and errors from non-admins.
2022-01-04 17:20:43 -06:00
ban_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
bulk_update_request_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
comment_policy.rb
modreports: don't allow reporting content more than 1 year old.
2022-01-20 21:50:31 -06:00
comment_vote_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
dmail_policy.rb
modreports: don't allow reporting content more than 1 year old.
2022-01-20 21:50:31 -06:00
email_address_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
favorite_group_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
favorite_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
forum_post_policy.rb
forum: delete posts when topic is deleted.
2022-01-21 22:35:20 -06:00
forum_post_vote_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
forum_topic_policy.rb
forum: add "..." menu to forum posts, like comments have.
2022-01-13 12:49:20 -06:00
ip_address_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
ip_ban_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
ip_geolocation_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
media_asset_policy.rb
media assets: fix md5 leak in media assets.
2022-01-30 23:23:55 -06:00
media_metadata_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
mod_action_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
moderation_report_policy.rb
modreports: fix private user information leak in new modreport action.
2022-02-06 14:39:08 -06:00
modqueue_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
news_update_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
nil_class_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
note_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
password_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
pool_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_appeal_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_approval_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_disapproval_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_flag_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_policy.rb
Fix #4987: Can't populate tag string from upload url anymore.
2022-02-03 19:41:04 -06:00
post_replacement_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_version_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
post_vote_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
rate_limit_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
saved_search_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
tag_alias_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
tag_implication_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
tag_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
upload_policy.rb
uploads: rework upload process.
2022-01-28 04:13:22 -06:00
user_event_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
user_feedback_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
user_name_change_request_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
user_policy.rb
posts: remove cropped thumbnails.
2021-12-16 15:58:29 -06:00
user_session_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
user_upgrade_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00
wiki_page_policy.rb
Enable frozen string literals.
2021-12-14 21:33:27 -06:00