Julian Lam 8e5a2276af feat: check flag values on save (assignee and state) (#8122) ...

* feat: add assignee checking when updating flag

Prior to this, it was possible to update the assignee to any value (or
any user. This commit adds checking to allow only admins, global
moderators, or in the case of flagged posts, moderators.

Also some prep work was added for value checking `state`.

* feat: value checking `state` on flag update

The state should be one of the constants defined earlier in the file.

2020-01-20 10:19:23 -05:00

..

database

properly filter /unread /recent /popular /top (#7927)

2019-09-26 21:55:49 -04:00

files

Replace jimp with sharp (#6774)

2018-09-20 17:05:52 -04:00

helpers

fix: #7912

2019-09-20 11:44:49 -04:00

mocks

fix: make _csrf a secure cookie if the website is using https (#8045)

2019-11-18 13:07:05 -05:00

.eslintrc

ESlint no-unused-vars

2017-02-18 15:05:36 -07:00

authentication.js

Async refactor in place (#7736)

2019-07-09 12:46:49 -04:00

batch.js

Async refactor in place (#7736)

2019-07-09 12:46:49 -04:00

blacklist.js

fix(deps): update to eslint@6

2019-06-22 21:23:32 -04:00

build.js

refactor: async/await

2019-10-05 17:05:52 -04:00

categories.js

Add privilege for accessing user information (#7859)

2019-09-17 14:02:52 -04:00

controllers-admin.js

fix: tests

2019-03-08 14:26:11 -05:00

controllers.js

fix: tests

2019-11-01 22:13:00 -04:00

coverPhoto.js

fix: #7116

2018-12-18 19:43:28 -05:00

database.js

fix: db info page

2018-12-10 15:30:10 -05:00

defer-logger.js

upgrade to winston 3.1, closes #6590 (#6838)

2018-10-16 13:07:13 -04:00

emailer.js

fixed tests, closes #6371

2018-03-20 10:32:53 -04:00

feeds.js

use includes instead of indexOf

2018-10-20 14:40:48 -04:00

file.js

refactor: async/await file

2019-09-23 22:30:17 -04:00

flags.js

feat: check flag values on save (assignee and state) (#8122)

2020-01-20 10:19:23 -05:00

groups.js

fix: group create/join/update name validation

2020-01-07 15:40:54 -05:00

image.js

up deps

2017-05-28 17:21:49 -04:00

locale-detect.js

fix: #7038, autoLocale logic not playing nicely with no-refresh auths (#7059)

2018-12-07 11:29:20 -05:00

messaging.js

fix: tests

2019-11-01 22:13:00 -04:00

meta.js

parse '123' to 123 if it has no default

2018-10-22 20:59:13 -04:00

mocha.opts

set cluster to false again

2018-10-16 17:21:03 -04:00

notifications.js

fix: tests

2019-11-01 22:13:00 -04:00

pagination.js

ESlint object-curly-spacing

2017-02-18 12:30:49 -07:00

plugins.js

fix: #8120, bubble errors from static hooks

2020-01-17 13:30:57 -05:00

posts.js

fix: change owner missing await

2020-01-17 11:16:23 -05:00

pubsub.js

test pubsub cache

2018-10-17 14:58:34 -04:00

rewards.js

fix: change params

2019-09-17 09:12:45 -04:00

search-admin.js

style(eslint): match operator-linebreak preferences

2018-11-30 13:38:59 -05:00

search.js

add searchonly option to searh api

2018-11-09 15:09:47 -05:00

settings.js

more settings tests

2018-10-18 16:33:34 -04:00

socket.io.js

fix: event tests

2019-10-11 12:44:34 -04:00

template-helpers.js

fix: test

2019-04-29 10:59:52 -04:00

topics.js

fix: meta description missing if url doesn't have post index

2019-12-30 22:19:00 -05:00

translator.js

fix: #7974 (#7976)

2019-10-16 13:33:00 -04:00

uploads.js

fix: delete upload

2020-01-19 14:57:06 -05:00

user.js

fix: escape config.userLang/acpLang, don't allow invalid language codes

2020-01-13 12:27:50 -05:00

utils.js

fix: convert param to string in slugify

2019-10-17 18:55:56 -04:00