zulip/zerver
Alex Vandiver c726d2ec01 thumbnail: Do not Camo old thumbor URLs; serve images directly.
Providing a signed Camo URL for arbitrary URLs opened the server up to
being an open redirector.  Return 403 if the URL is not a user upload,
and the backend image if it is.  Since we do not have ImageAttachment
rows for uploads at a time we wrote `/thumbnail?` URLs, return the
full-size content.
2024-07-24 16:04:34 -07:00
..
actions markdown: Show thumbnails for uploaded images. 2024-07-21 18:41:59 -07:00
data_import rocketchat: Remove unnecessary SHA-1 hashing of direct message groups. 2024-07-17 15:56:00 -07:00
integration_fixtures/nagios
lib thumbnail: Do not Camo old thumbor URLs; serve images directly. 2024-07-24 16:04:34 -07:00
management thumbnail: Move get_image_thumbnail_path and split_thumbnail_path. 2024-07-18 13:50:28 -07:00
migrations settings: Add setting to control how animated images are played. 2024-07-22 14:53:31 -07:00
models settings: Add setting to control how animated images are played. 2024-07-22 14:53:31 -07:00
openapi settings: Add setting to control how animated images are played. 2024-07-22 14:53:31 -07:00
tests thumbnail: Do not Camo old thumbor URLs; serve images directly. 2024-07-24 16:04:34 -07:00
tornado ruff: Fix UP035 Import from `collections.abc`, `typing` instead. 2024-07-13 22:28:22 -07:00
transaction_tests ruff: Bump target-version from py38 to py310. 2024-07-13 22:28:22 -07:00
views thumbnail: Do not Camo old thumbor URLs; serve images directly. 2024-07-24 16:04:34 -07:00
webhooks integration-docs: Update Opsgenie for new doc format. 2024-07-21 18:09:13 -07:00
worker thumbnail: Add a data-original-dimensions attribute. 2024-07-22 22:41:10 -04:00
__init__.py
apps.py ruff: Fix UP007 Use `X | Y` for type annotations. 2024-07-13 22:28:22 -07:00
context_processors.py ruff: Fix UP035 Import from `collections.abc`, `typing` instead. 2024-07-13 22:28:22 -07:00
decorator.py ruff: Fix UP035 Import from `collections.abc`, `typing` instead. 2024-07-13 22:28:22 -07:00
filters.py ruff: Fix UP007 Use `X | Y` for type annotations. 2024-07-13 22:28:22 -07:00
forms.py ruff: Fix UP007 Use `X | Y` for type annotations. 2024-07-13 22:28:22 -07:00
logging_handlers.py ruff: Fix UP007 Use `X | Y` for type annotations. 2024-07-13 22:28:22 -07:00
middleware.py ruff: Fix UP035 Import from `collections.abc`, `typing` instead. 2024-07-13 22:28:22 -07:00
signals.py ruff: Bump target-version from py38 to py310. 2024-07-13 22:28:22 -07:00