You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Julian Lam 8e5a2276af
feat: check flag values on save (assignee and state) (#8122)
* feat: add assignee checking when updating flag

Prior to this, it was possible to update the assignee to any value (or
any user. This commit adds checking to allow only admins, global
moderators, or in the case of flagged posts, moderators.

Also some prep work was added for value checking `state`.

* feat: value checking `state` on flag update

The state should be one of the constants defined earlier in the file.
5 years ago
..
database properly filter /unread /recent /popular /top (#7927) 5 years ago
files Replace jimp with sharp (#6774) 6 years ago
helpers fix: #7912 5 years ago
mocks fix: make _csrf a secure cookie if the website is using https (#8045) 5 years ago
.eslintrc ESlint no-unused-vars 8 years ago
authentication.js Async refactor in place (#7736) 6 years ago
batch.js Async refactor in place (#7736) 6 years ago
blacklist.js fix(deps): update to eslint@6 6 years ago
build.js refactor: async/await 5 years ago
categories.js Add privilege for accessing user information (#7859) 5 years ago
controllers-admin.js fix: tests 6 years ago
controllers.js fix: tests 5 years ago
coverPhoto.js fix: #7116 6 years ago
database.js fix: db info page 6 years ago
defer-logger.js upgrade to winston 3.1, closes #6590 (#6838) 6 years ago
emailer.js fixed tests, closes #6371 7 years ago
feeds.js use includes instead of indexOf 6 years ago
file.js refactor: async/await file 5 years ago
flags.js feat: check flag values on save (assignee and state) (#8122) 5 years ago
groups.js fix: group create/join/update name validation 5 years ago
image.js up deps 8 years ago
locale-detect.js fix: #7038, autoLocale logic not playing nicely with no-refresh auths (#7059) 6 years ago
messaging.js fix: tests 5 years ago
meta.js parse '123' to 123 if it has no default 6 years ago
mocha.opts set cluster to false again 6 years ago
notifications.js fix: tests 5 years ago
pagination.js ESlint object-curly-spacing 8 years ago
plugins.js fix: #8120, bubble errors from static hooks 5 years ago
posts.js fix: change owner missing await 5 years ago
pubsub.js test pubsub cache 6 years ago
rewards.js fix: change params 5 years ago
search-admin.js style(eslint): match operator-linebreak preferences 6 years ago
search.js add searchonly option to searh api 6 years ago
settings.js more settings tests 6 years ago
socket.io.js fix: event tests 5 years ago
template-helpers.js fix: test 6 years ago
topics.js fix: meta description missing if url doesn't have post index 5 years ago
translator.js fix: #7974 (#7976) 5 years ago
uploads.js fix: delete upload 5 years ago
user.js fix: escape config.userLang/acpLang, don't allow invalid language codes 5 years ago
utils.js fix: convert param to string in slugify 5 years ago