evazion 5ad06a4034 Fix #3552: Upload filesize limits can be bypassed. ...

* Change `http_get_streaming` to write the output file directly,
  instead of taking a callback.

* Track the filesize as the download progresses and abort when it
  exceeds the limit.

* Don't save the Content-Type (it's not used anywhere).

2018-02-27 18:22:34 -06:00

..

assets

Upgrade to jquery-2.2.4 (#3548).

2018-02-24 10:43:12 -06:00

controllers

bulk update requests: allow admins to edit forum topic/post ids (#3554).

2018-02-18 13:08:53 -06:00

helpers

ApplicationHelper#search_field: accept html attributes on <input> field.

2018-02-18 18:34:18 -06:00

logical

Fix #3552: Upload filesize limits can be bypassed.

2018-02-27 18:22:34 -06:00

mailers

fixes #2478: Add links for easy opt-out of emails

2015-09-03 17:03:03 -07:00

models

Fix #3554: approving BUR with nil forum_post_id doesn't update forum.

2018-02-24 15:04:57 -06:00

presenters

Fix #3497: Invalid DText denial of service attack.

2018-01-14 16:14:18 -06:00

views

Merge pull request #3555 from evazion/fix-3554

2018-02-21 14:52:11 -08:00