nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
diaspora/app/controllers
History
Jonne Haß 0a70e51f74 Add a token the filename for exported user data 
Also redirect to it for download, for Amazon S3
compatibility.

Prior to this patch an attacker could obtain an
users export by guessing the filename with a high
chance of success. Fully authenticating the
download request is a lot harder due to our diverse
deployment scenarios.

This brings the used method in line with the photo
export feature.

Thanks to @tomekr for the report.
2015-04-22 20:19:17 +02:00
..
admin Lock account #5564 2015-02-19 05:45:04 +05:30
api/v1
admins_controller.rb Remove blueprint code 2015-03-02 00:04:57 +01:00
application_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
aspect_memberships_controller.rb Port contacts page to backbonejs 2015-01-04 17:13:18 +01:00
aspects_controller.rb
blocks_controller.rb
comments_controller.rb
contacts_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
conversation_visibilities_controller.rb
conversations_controller.rb Remove blueprint code 2015-03-02 00:04:57 +01:00
help_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
home_controller.rb Replace default.html with a regular view 2015-03-28 23:12:07 +01:00
invitation_codes_controller.rb
invitations_controller.rb rightbar invitations ported to bootstrap 2015-03-01 12:04:53 +01:00
likes_controller.rb Add ActiveRecord::RecordNotFound catching. Add tests. 2014-12-22 12:36:09 +01:00
messages_controller.rb
notifications_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
participations_controller.rb Some fixes to participation controls 2015-02-27 15:31:30 +01:00
people_controller.rb Fix layout regression: missing header on search page 2015-03-28 13:54:52 +01:00
photos_controller.rb Fix layout regression: missing header on search page 2015-03-28 13:54:52 +01:00
poll_participations_controller.rb
posts_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
profiles_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
publics_controller.rb
registrations_controller.rb Remove blueprint code 2015-03-02 00:04:57 +01:00
report_controller.rb Remove blueprint code 2015-03-02 00:04:57 +01:00
reshares_controller.rb
search_controller.rb
services_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
sessions_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
share_visibilities_controller.rb
statistics_controller.rb Remove layout 'centered_with_header_with_footer' 2015-03-18 21:59:56 +01:00
status_messages_controller.rb fix too long tag name #5737 2015-03-15 16:15:33 +02:00
streams_controller.rb Remove footer from stream and profile pages 2015-03-26 16:28:01 +01:00
tag_followings_controller.rb
tags_controller.rb Remove footer from stream and profile pages 2015-03-26 16:28:01 +01:00
terms_controller.rb Remove blueprint code 2015-03-02 00:04:57 +01:00
users_controller.rb Add a token the filename for exported user data 2015-04-22 20:19:17 +02:00