Branch: refs/heads/master
Home: https://github.com/openSUSE/open-build-service
Commit: 00642117935f0629890096c82dadb43c4a72161b
https://github.com/openSUSE/open-build-service/commit/00642117935f062989009…
Author: Lukas Krause <lkrause(a)suse.de>
Date: 2020-09-25 (Fri, 25 Sep 2020)
Changed paths:
M src/api/app/views/layouts/webui/_search.html.haml
M src/api/app/views/layouts/webui/responsive_ux/_top_navigation_search.html.haml
M src/api/config/routes/webui_routes.rb
M src/api/public/404.html
Log Message:
-----------
Only use GET for search index endpoint
The search#index endpoint doesnt modify or
store and any data. Therefore we shouldn't allow
or use POST request to access the resource.
This will also prevent issues with our 404 page
which is a static html file that doesn't include a
CSRF token (which would be require for POST).
Fixes #10196
Commit: 42155f0f725b477a3d9e423dd7e46e8333e80257
https://github.com/openSUSE/open-build-service/commit/42155f0f725b477a3d9e4…
Author: Henne Vogelsang <hvogel(a)opensuse.org>
Date: 2020-09-25 (Fri, 25 Sep 2020)
Changed paths:
M src/api/app/views/layouts/webui/_search.html.haml
M src/api/app/views/layouts/webui/responsive_ux/_top_navigation_search.html.haml
M src/api/config/routes/webui_routes.rb
M src/api/public/404.html
Log Message:
-----------
Merge pull request #10207 from krauselukas/fix/404_search
Only use GET for search index endpoint
Compare: https://github.com/openSUSE/open-build-service/compare/bbc4566d4284...42155…
Branch: refs/heads/master
Home: https://github.com/openSUSE/open-build-service
Commit: ba0cead47079a2ab846beeb3353edfff6fe4c256
https://github.com/openSUSE/open-build-service/commit/ba0cead47079a2ab846be…
Author: Eduardo Navarro <enavarro(a)suse.com>
Date: 2020-09-25 (Fri, 25 Sep 2020)
Changed paths:
M src/api/app/presenters/notification_presenter.rb
Log Message:
-----------
Remove markdown tags in notifications' excerpts
Use a render that strips the markdown tags. This way we show a more
understandable excerpt in the list of notifications.
Commit: ae51b7cd507954b41ace6b2688b856e63d12e33a
https://github.com/openSUSE/open-build-service/commit/ae51b7cd507954b41ace6…
Author: Eduardo Navarro <enavarro(a)suse.com>
Date: 2020-09-25 (Fri, 25 Sep 2020)
Changed paths:
M src/api/app/helpers/webui/markdown_helper.rb
M src/api/spec/helpers/webui/markdown_helper_spec.rb
M src/api/spec/mailers/event_mailer_spec.rb
Log Message:
-----------
Use sanitize helper to show safer user input
Make showing the user input in a comment or a description of a request
safer. This way we also don't need to disable the Rails/OutputSafety
RuboCop cop. Tests were adapted accordingly.
Kudos to @krauselukas.
Commit: bbc4566d4284a949c90acf972844cf47cdd48b11
https://github.com/openSUSE/open-build-service/commit/bbc4566d4284a949c90ac…
Author: Henne Vogelsang <hvogel(a)opensuse.org>
Date: 2020-09-25 (Fri, 25 Sep 2020)
Changed paths:
M src/api/app/helpers/webui/markdown_helper.rb
M src/api/app/presenters/notification_presenter.rb
M src/api/spec/helpers/webui/markdown_helper_spec.rb
M src/api/spec/mailers/event_mailer_spec.rb
Log Message:
-----------
Merge pull request #10199 from eduardoj/remove_markdown_from_notifications
Remove markdown tags in notifications' excerpts
Compare: https://github.com/openSUSE/open-build-service/compare/7659b4657eef...bbc45…