Alex Vandiver f1c61fbea1 openapi: Use more carefully-constructed regexes for markdown extension. ... This removes a false-positive ReDoS, since the input is always checked-in code. It also incidentally refactors to make the regexes be more explicit about the values they expect, and removes unnecessary capturing groups. It removes an optional parenthesized status code for fixtures, unnecessary since 981e4f8946, as well as optional key-value language options, unnecessary since a2be9a0e2d. Thank you to @erik-krogh and @yoff for bringing this to our attention.		2021-10-03 18:49:38 -07:00
..
data_import	python: Remove locally dead code.	2021-08-19 01:51:37 -07:00
integration_fixtures/nagios	tests: Add a test for fixtures for non-webhook integrations.	2021-04-28 08:16:51 -07:00
lib	markdown/tabbed_sections: Raise exception for missing tab name.	2021-10-01 16:25:17 -07:00
management	outgoing_http: Use OutgoingSession subclasses in more places.	2021-09-01 05:34:13 -07:00
migrations	streams: Split setting for stream creation policy.	2021-10-01 10:26:42 -07:00
openapi	openapi: Use more carefully-constructed regexes for markdown extension.	2021-10-03 18:49:38 -07:00
tests	openapi: Use more carefully-constructed regexes for markdown extension.	2021-10-03 18:49:38 -07:00
tornado	tornado: Make process_notification hack avoid import loops.	2021-09-28 10:07:36 -07:00
views	streams: Split setting for stream creation policy.	2021-10-01 10:26:42 -07:00
webhooks	help: Add newline after admonition header for Prettier compatibility.	2021-09-10 10:39:25 -07:00
worker	invite: Extend invite api for handling expiration duration.	2021-09-10 16:53:03 -07:00
__init__.py	django: Upgrade Zulip to Django 3.2 LTS.	2021-05-03 08:36:22 -07:00
apps.py	caching: Make sender type optional for flush_cache.	2021-07-26 14:48:07 -07:00
context_processors.py	request: Refactor ZulipRequestNotes to RequestNotes.	2021-09-03 08:48:45 -07:00
decorator.py	user_passes_test: Extract zulip_redirect_to_login from it.	2021-09-14 10:33:53 -07:00
filters.py	typing: Fix function signatures.	2021-08-20 05:54:19 -07:00
forms.py	auth: Make the deactivated user error message clearer.	2021-09-10 10:47:15 -07:00
logging_handlers.py	logging_handlers: Remove STAGING_ERROR_NOTIFICATIONS setting.	2021-07-07 09:26:02 -07:00
middleware.py	request_notes: Set the realm appropriately for the root subdomain.	2021-09-28 10:02:52 -07:00
models.py	streams: Split setting for stream creation policy.	2021-10-01 10:26:42 -07:00
signals.py	python: Convert deprecated Django ugettext alias to gettext.	2021-04-15 18:01:34 -07:00