zulip

Author	SHA1	Message	Date
Tim Abbott	a2767e8c50	CVE-2020-14194: Use noopener/noreferrer for external links. We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.	2020-06-16 23:35:39 -07:00
Ryan Rehman	174b2abcfd	settings: Migrate to stream_post_policy structure. This commit includes a new `stream_post_policy` setting, by replacing the `is_announcement_only` field from the Stream model, which is done by mirroring the structure of the existing `create_stream_policy`. It includes the necessary schema and database migrations to migrate the is_announcement_only boolean field to stream_post_policy, a smallPositiveInteger field similar to many other settings. This change is done to allow organization administrators to restrict new members from creating and posting to a stream. However, this does not affect admins who are new members. With many tweaks by tabbott to documentation under /help, etc. Fixes #13616.	2020-02-04 17:08:08 -08:00
Anders Kaseorg	0c565f50be	templates: Use upstream Handlebars partials syntax. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>	2019-07-12 21:11:14 -07:00
Anders Kaseorg	3c3471b720	templates: Rename .handlebars ↦ .hbs and - ↦ _. Tweaked by tabbott to avoid accidentally disabling the linter for handlebars templates. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>	2019-07-12 21:11:03 -07:00