Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/zerver/views
History
Prakhar Pratyush c4330be2b1 user_topics: Validate 'topic' parameter length <= max_topic_length. 
Earlier, 'topic' parameter length for
'/users/me/subscriptions/muted_topics' and '/user_topics' endpoints
were not validated before DB operations which resulted in exception:
'DataError: value too long for type character varying(60)'.

This commit adds validation for the topic name length to be
capped at 'max_topic_length' characters.

The doc is updated to suggest clients that the topic name should
have a maximum length of 'max_topic_length'.

Fixes #27796.
 		2024-01-04 09:43:27 -08:00
..
development models: Extract zerver.models.clients. 2023-12-16 22:08:44 -08:00
__init__.py
…
alert_words.py alert_words: Migrate alert_words to use @typed_endpoint. 2023-09-08 08:20:17 -07:00
attachments.py attachments: Correct attachment_id type from string to integer. 2023-10-22 17:06:34 -07:00
auth.py models: Extract zerver.models.prereg_users. 2023-12-16 22:08:44 -08:00
compatibility.py
…
custom_profile_fields.py models: Extract zerver.models.custom_profile_fields. 2023-12-16 22:08:44 -08:00
digest.py
…
documentation.py mypy: Enable new error explicit-override. 2023-10-12 12:28:41 -07:00
drafts.py drafts: Migrate drafts to use @typed_endpoint. 2023-09-08 08:20:17 -07:00
email_mirror.py
…
errors.py config_error: Return status code 500. 2023-10-11 17:13:01 -07:00
events_register.py register: Add client capability to not receive unknown users data. 2023-12-06 00:09:53 -08:00
health.py views: Add a /health healthcheck endpoint. 2023-09-20 09:53:59 -07:00
home.py narrow: Split out narrow_helpers. 2023-06-30 11:26:23 -07:00
hotspots.py urls: Add a new endpoint for hotspot and deprecate the old one. 2023-12-06 18:19:20 -08:00
invite.py invites: Make it possible for non-admins to revoke multiuse invites. 2023-09-07 14:21:01 -07:00
message_edit.py message: Do not include details of inaccessible users in message data. 2023-12-09 17:23:16 -08:00
message_fetch.py message: Do not include details of inaccessible users in message data. 2023-12-09 17:23:16 -08:00
message_flags.py response: Remove "result: partially_completed" for success responses. 2023-09-18 13:18:24 -07:00
message_send.py models: Extract zerver.models.users. 2023-12-16 22:08:44 -08:00
muted_users.py bots: Fix muting of cross realm bots. 2023-11-27 16:16:23 -08:00
presence.py models: Extract zerver.models.users. 2023-12-16 22:08:44 -08:00
push_notifications.py gear_menu_popover: Enable `Plan management` in production. 2023-12-15 11:03:42 -08:00
reactions.py message: Access realm object directly from message. 2023-08-23 11:38:32 -07:00
read_receipts.py
…
realm.py realm: Enfore length restriction on jitsi_server_url at API level. 2023-12-14 12:11:59 -08:00
realm_domains.py models: Extract zerver.models.realms. 2023-12-16 22:08:44 -08:00
realm_emoji.py models: Extract zerver.models.realm_emoji. 2023-12-16 22:08:44 -08:00
realm_export.py migration: Rename extra_data_json to extra_data in audit log models. 2023-08-16 17:18:14 -07:00
realm_icon.py ruff: Fix RUF015 Prefer `next(...)` over single element slice. 2023-07-23 15:20:53 -07:00
realm_linkifiers.py models: Extract zerver.models.linkifiers. 2023-12-16 22:08:44 -08:00
realm_logo.py ruff: Fix RUF015 Prefer `next(...)` over single element slice. 2023-07-23 15:20:53 -07:00
realm_playgrounds.py realm_playgrounds: Refactor error handling for validation on creation. 2023-07-24 17:40:59 -07:00
registration.py models: Extract zerver.models.streams. 2023-12-16 22:08:44 -08:00
report.py ruff: Collapse short multi-line import statements. 2023-08-02 17:41:41 -07:00
scheduled_messages.py message_send: Add read_by_sender API parameter. 2023-12-14 08:16:31 -08:00
sentry.py python: Use urlsplit instead of urlparse. 2023-12-05 13:03:07 -08:00
storage.py
…
streams.py models: Extract zerver.models.users. 2023-12-16 22:08:44 -08:00
submessage.py
…
thumbnail.py models: Move some functions to zerver.lib.attachments. 2023-12-16 22:08:44 -08:00
tutorial.py
…
typing.py typing_indicator: Add a 'stream_id' parameter to 'POST /typing'. 2023-10-12 09:53:09 -07:00
unsubscribe.py black: Reformat with Black 23. 2023-02-02 10:40:13 -08:00
upload.py models: Move some functions to zerver.lib.attachments. 2023-12-16 22:08:44 -08:00
user_groups.py models: Extract zerver.models.users. 2023-12-16 22:08:44 -08:00
user_settings.py models: Extract zerver.models.realms. 2023-12-16 22:08:44 -08:00
user_topics.py user_topics: Validate 'topic' parameter length <= max_topic_length. 2024-01-04 09:43:27 -08:00
users.py models: Extract zerver.models.realms. 2023-12-16 22:08:44 -08:00
video_calls.py models: Extract zerver.models.realms. 2023-12-16 22:08:44 -08:00
zephyr.py
…