Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/zerver/views
History
Tim Abbott b064559652 zephyr: Add strict assertion about username format. 
This ensures that even if it were possible to create an MIT Kerberos
account with a malicious username and/or hack webathena to pretend
that's the case, one couldn't do anything malicious.

This security improvement only impacts a single installation of Zulip
where Zephyr mirroring is in use that has already had the fix applied,
so there's no reason to do a security notice for it.

Found by Graham Bleaney using pysa.
 		2020-03-17 05:37:25 -07:00
..
development scripts: Move inline-email-css from tools to scripts. 2019-11-15 17:39:42 -08:00
__init__.py
…
alert_words.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
archive.py models: Delete get_stream_recipient function and its uses. 2020-02-18 10:49:14 -08:00
attachments.py uploads: Show used upload space in attachments UI. 2019-03-07 20:18:00 -08:00
auth.py middleware: Log user.id/realm.string_id instead of _email. 2020-03-09 13:54:58 -07:00
camo.py camo: Clean up type ignores. 2019-08-09 16:39:16 -07:00
compatibility.py panels: Show a banner for users with legacy desktop apps. 2020-02-28 01:54:46 -08:00
custom_profile_fields.py do_update_user_custom_profile_data: Rename to ..._if_changed. 2019-10-01 13:52:43 -07:00
digest.py digest: Fix the styling of /digest page. 2019-01-07 13:09:29 -08:00
documentation.py request: Tighten type checking on REQ. 2019-11-13 12:35:55 -08:00
email_mirror.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
events_register.py presence: Add slim_presence flag. 2020-02-04 12:30:34 -08:00
home.py templates: Delete show_debug feature. 2020-03-08 18:34:59 -07:00
hotspots.py views: Fix imports of REQ/has_request_variables from the wrong place. 2017-10-27 15:07:31 -07:00
invite.py invitations: Avoid adding to notifications stream unconditionally. 2020-01-27 15:36:59 -08:00
messages.py messages: Ban the sender property when not mirroring. 2020-03-08 14:09:32 -07:00
muting.py muting: Record DateTime when a Topic is muted. 2020-02-02 20:49:53 -08:00
pointer.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
portico.py portico: Provide isolated single-page versions of /terms and /privacy . 2020-01-29 11:54:20 -08:00
presence.py presence: Rename get_status_dict_by_user(). 2020-02-06 17:16:22 -08:00
push_notifications.py push_notifications: Declare token of type str, not bytes. 2019-11-12 23:21:20 -08:00
reactions.py api: Remove legacy emoji reactions endpoint. 2019-11-12 13:07:06 -08:00
realm.py realm: Add private_message_policy setting. 2020-01-13 12:20:42 -08:00
realm_domains.py lint: Fix calls to _() on computed strings. 2019-04-23 15:23:03 -07:00
realm_emoji.py openapi: Fix handling of parameters passed via the URL/path. 2019-08-19 15:06:08 -07:00
realm_export.py billing: Change RealmAuditLog.event_type from str to int. 2019-10-06 15:55:56 -07:00
realm_filters.py views: Remove unused imports. 2019-02-02 17:23:43 -08:00
realm_icon.py zerver/views: Use python 3 syntax for typing. 2017-10-26 21:58:22 -07:00
realm_logo.py realm_logo: Remove redundant `realm_logo_url` function. 2019-08-20 12:07:20 -07:00
registration.py refactor: Move validate_email_not_already_in_realm. 2020-03-06 11:53:22 -08:00
report.py report_error: Fix inaccurate docstring. 2020-03-09 13:54:58 -07:00
storage.py views: Remove unused imports. 2019-02-02 17:23:43 -08:00
streams.py messages_for_topic: Use stream.recipient_id for more efficient query. 2020-02-11 17:39:43 -08:00
submessage.py views: Remove unused imports. 2019-02-02 17:23:43 -08:00
thumbnail.py views: Remove unused imports. 2019-02-02 17:23:43 -08:00
tutorial.py cleanup: Delete leading newlines. 2019-08-06 23:29:11 -07:00
typing.py recipients: Rename extract_recipients to extract_private_recipients. 2020-02-11 12:28:14 -08:00
unsubscribe.py emails: Move clear_scheduled_*emails to send_email.py. 2019-03-15 11:02:17 -07:00
upload.py dependencies: Upgrade to Django 2.2.10. 2020-02-13 16:27:26 -08:00
user_groups.py decorator: Extract require_user_group_edit_permission. 2019-11-18 15:13:29 -08:00
user_settings.py refactor: Avoid hacky use of ValidationError.code. 2020-03-06 11:53:22 -08:00
users.py api: Refactor get_members_backend in zerver/views/users.py. 2020-03-08 18:43:30 -07:00
video_calls.py compose: Add support for using Zoom as the video chat provider. 2019-01-07 10:00:02 -08:00
zephyr.py zephyr: Add strict assertion about username format. 2020-03-17 05:37:25 -07:00