paulmataruso/zulip
1
0
Fork 0
mirror of https://github.com/zulip/zulip.git synced 2025-11-02 04:53:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
10.x
zulip/zerver/lib
History
Anders Kaseorg 175ec1f365 CVE-2025-52559: Generate HTML for digest new channels safely. 
Signed-off-by: Anders Kaseorg <anders@zulip.com>
2025-07-02 11:40:30 -07:00
..
markdown
ruff: Fix RUF051 Use pop instead of key in dict…del dict[key].
2025-03-14 17:31:50 -07:00
upload
s3: Support non-AWS S3 providers which do not support request checksums.
2025-04-10 17:42:48 -07:00
url_preview
python: Replace deprecated BeautifulSoup.findAll.
2025-02-18 22:04:43 -08:00
webhooks
integrations: Improve the branch filtering in Git-related integrations.
2025-03-05 10:39:13 -08:00
__init__.py
…
addressee.py
addressee: Rename "(no topic)" to empty string topic.
2025-03-19 11:39:28 -07:00
alert_words.py
alert_words: Update remove_alert_word codepath to send event on commit.
2024-07-31 22:33:52 -07:00
async_utils.py
…
attachments.py
attachments: Allow seeing attachments to users with content access.
2025-05-07 15:38:22 -07:00
avatar_hash.py
…
avatar.py
avatar: Add option to disable gravatars per realm.
2025-01-30 18:46:02 -08:00
bot_config.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
bot_lib.py
worker: Flag messages processed by outgoing bot.
2025-01-24 17:56:44 -08:00
bot_storage.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
bulk_create.py
message: Use new setting for checking stream posting permissions.
2025-01-07 12:17:09 -08:00
cache_helpers.py
cache_helpers: Stop pre-filling the non-narrow user cache.
2025-02-18 12:17:54 -08:00
cache.py
user: Remove is_billing_admin user property.
2025-03-10 09:36:30 -07:00
camo.py
…
ccache.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
compatibility.py
ruff: Fix PLR6104 Use += to perform an augmented assignment directly.
2024-07-14 13:49:51 -07:00
context_managers.py
ruff: Fix SIM117 Use a single with statement with multiple contexts.
2024-07-14 13:48:32 -07:00
create_user.py
api: Improve handling of delivery_email in the GET /users/{email} API.
2024-10-08 18:01:49 -07:00
db_connections.py
…
db.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
debug.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
default_streams.py
default streams: Return set instead of a list.
2025-01-22 10:55:25 -08:00
dev_ldap_directory.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
digest.py
CVE-2025-52559: Generate HTML for digest new channels safely.
2025-07-02 11:40:30 -07:00
display_recipient.py
mypy: Remove use of ValuesQuerySet and QuerySetAny.
2024-08-24 17:30:41 -07:00
domains.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
drafts.py
drafts: Update do_delete_draft to send event on commit.
2024-08-12 12:16:14 -07:00
email_mirror_helpers.py
streams: Allow specifying sender during channel email generation.
2025-01-08 12:17:16 -08:00
email_mirror.py
email_mirror: Also strip "SV:" from subject.
2025-06-26 10:02:57 -07:00
email_notifications.py
CVE-2025-52559: Generate HTML for digest message sender safely.
2025-07-02 11:40:26 -07:00
email_validation.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
emoji_utils.py
…
emoji.py
emoji: Use a non-predictable filename.
2024-07-12 13:26:47 -07:00
event_schema.py
streams: Fix events send when archiving and unarchiving streams.
2025-05-07 15:38:22 -07:00
event_types.py
user_groups: Use UserGroupMembersDict in initial state data.
2025-03-18 11:53:48 -07:00
events.py
streams: Fix events send when archiving and unarchiving streams.
2025-05-07 15:38:22 -07:00
exceptions.py
settings: Remove conditions for dense_mode setting.
2025-03-10 16:07:37 -07:00
export.py
export: Also add guardrail to the management command.
2025-03-28 16:52:44 -07:00
external_accounts.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
fix_unreads.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
generate_test_data.py
ruff: Fix PLR6104 Use += to perform an augmented assignment directly.
2024-07-14 13:49:51 -07:00
github.py
python: Simplify with str.removeprefix, str.removesuffix.
2024-09-03 12:30:16 -07:00
home.py
settings: Add "can_manage_billing_group" realm setting.
2025-03-10 09:36:30 -07:00
html_diff.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
html_to_text.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
i18n.py
registration: Fix language code missing for find_team emails.
2025-03-27 16:53:35 -07:00
import_realm.py
migration_status: Refactor parse_migration_status.
2025-03-20 10:57:54 -07:00
initial_password.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
integrations.py
integrations: Add OpenSearch incoming webhook integration.
2025-06-26 10:02:57 -07:00
invites.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
logging_util.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
management.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
mdiff.py
tests: Rename the Node tests to *.cjs.
2024-11-13 09:18:56 -08:00
mention.py
user_group: Move UserGroupMembershipDetails from lib/streams.py.
2025-02-21 15:36:07 -08:00
message_cache.py
fetch_messages: Add support for empty topic names.
2025-01-07 17:24:00 -08:00
message.py
unread_data: Ensure deterministic ordering of unread message rows.
2025-05-07 15:38:22 -07:00
migrate.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
migration_status.py
migration_status: Refactor parse_migration_status.
2025-03-20 10:57:54 -07:00
mime_types.py
mime_types: Move INLINE_MIME_TYPES to prevent future import loops.
2025-01-09 09:09:13 -08:00
mobile_auth_otp.py
ruff: Fix B905 zip() without an explicit strict= parameter.
2024-07-13 22:28:22 -07:00
muted_users.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
name_restrictions.py
signup: Add "airsi.de" as an allowed email domain.
2025-03-19 10:04:11 -07:00
narrow_helpers.py
url_decoding: Add parse_narrow_url.
2025-02-24 15:37:40 -08:00
narrow_predicate.py
narrow_term: Refactor a NeverNegatedNarrowTerm.
2025-02-24 15:37:40 -08:00
narrow.py
narrow: Fix get_base_query_for_search access restrictions.
2025-04-14 16:02:26 -07:00
notes.py
ruff: Fix FURB180 Use of metaclass=abc.ABCMeta.
2024-07-14 13:53:40 -07:00
notification_data.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
onboarding_steps.py
onboarding_steps: Add 'navigation_tour_video' for new users.
2025-03-13 14:38:16 -07:00
onboarding.py
onboarding: Add navigation_tour_video_text in initial DM by welcome bot.
2025-03-13 14:38:16 -07:00
outgoing_http.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
outgoing_webhook.py
fetch_messages: Add support for empty topic names.
2025-01-07 17:24:00 -08:00
partial.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
per_request_cache.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
presence.py
presence: Add history_limit_days param to the API.
2024-09-10 13:15:35 -07:00
profile.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
push_notifications.py
message: Make is_modifying_message a mandatory kwarg.
2025-02-28 10:10:33 -08:00
pysa.py
…
query_helpers.py
mypy: Remove use of ValuesQuerySet and QuerySetAny.
2024-08-24 17:30:41 -07:00
queue.py
queue: Round-trip events through orjson in tests.
2025-03-18 11:53:51 -07:00
rate_limiter.py
zilencer: Add flow for a server to reclaim its registration.
2025-01-28 11:10:50 -08:00
realm_description.py
…
realm_icon.py
…
realm_logo.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
recipient_parsing.py
scheduled_messages: Migrate to typed_endpoint.
2024-08-20 10:03:22 -07:00
recipient_users.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
redis_utils.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
remote_server.py
management: Don't silence send_server_data_to_push_bouncer exceptions.
2025-02-19 17:11:35 -08:00
request.py
tornado: Remove incorrect rate_limit request note.
2025-02-13 12:40:53 -08:00
response.py
test_classes: Refine assert_json_success output with exception chaining.
2024-12-04 11:38:45 -08:00
rest.py
tornado: Limit the width of the user queries, when they're needed.
2025-02-13 12:40:53 -08:00
retention.py
retention: Add flag to ArchiveTransaction to prevent automatic deletion.
2025-02-04 11:31:13 -08:00
safe_session_cached_db.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
scheduled_messages.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
scim_filter.py
zerver: Replace uri with url in local variables and comments.
2024-07-14 22:30:28 -07:00
scim.py
scim: Add None check for email_new_value.
2024-12-21 21:06:53 -08:00
send_email.py
send_email: Only attempt suppression list removal with credentials.
2025-06-26 10:02:57 -07:00
server_initialization.py
groups: Remove id_field_name field from GroupPermissionSetting.
2024-12-04 11:15:17 -08:00
sessions.py
sessions: Use the narrow user fetch when expiring sessions.
2025-02-13 12:40:53 -08:00
singleton_bmemcached.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
soft_deactivation.py
handle_missedmessage_emails: Update codepath to queue event on commit.
2024-12-04 12:14:23 -08:00
sounds.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
sqlalchemy_utils.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
storage.py
storage: Simplify system bot avatar logic.
2024-10-25 10:59:57 -07:00
stream_color.py
codespell: Fix typos caught by codespell.
2025-02-18 22:04:43 -08:00
stream_subscription.py
streams: Add bulk_access_stream_metadata_user_ids.
2025-03-27 16:53:35 -07:00
stream_topic.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
stream_traffic.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
streams.py
streams: Fix events send when archiving and unarchiving streams.
2025-05-07 15:38:22 -07:00
string_validation.py
message_send: Add support to send message with an empty topic name.
2025-01-07 17:24:00 -08:00
subdomains.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
subscription_info.py
user_groups: Rename UserGroupMembersDict to UserGroupMembersData.
2025-03-17 14:21:37 -07:00
templates.py
CVE-2025-52559: Generate HTML for digest new channels safely.
2025-07-02 11:40:30 -07:00
test_classes.py
requirements: Upgrade Python requirements.
2025-05-16 13:06:58 -07:00
test_console_output.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
test_data.source.txt
…
test_fixtures.py
requirements: Migrate to uv.
2025-02-24 22:29:24 -08:00
test_helpers.py
zephyr: Switch from py3dns to dnspython.
2025-02-25 11:53:08 -08:00
test_runner.py
ruff: Fix RUF051 Use pop instead of key in dict…del dict[key].
2025-03-14 17:31:50 -07:00
tex.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
thumbnail.py
thumbnail: Add a tool to re-thumbnail spinners, or process old images.
2025-05-07 15:38:22 -07:00
timeout.py
ruff: Fix UP035 Import from collections.abc, typing instead.
2024-07-13 22:28:22 -07:00
timestamp.py
…
timezone.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
topic_sqlalchemy.py
topic: Enforce is_channel_message=True on topic queries.
2025-03-18 09:34:11 -07:00
topic.py
addressee: Rename "(no topic)" to empty string topic.
2025-03-19 11:39:28 -07:00
transfer.py
upload: Rename "upload_image_to_s3"; it is not only for images.
2024-09-09 12:40:17 -07:00
typed_endpoint_validators.py
user_settings: Migrate to typed_endpoint.
2024-07-31 17:10:06 -07:00
typed_endpoint.py
requirements: Upgrade Python requirements.
2025-01-14 09:42:16 -08:00
types.py
user_groups: Use UserGroupMembersDict in initial state data.
2025-03-18 11:53:48 -07:00
url_decoding.py
url_decoding: Add parse_narrow_url.
2025-02-24 15:37:40 -08:00
url_encoding.py
urls: Generate narrow links in backend with "channel" operator.
2024-10-11 17:00:23 -07:00
url_redirects.py
help: Rename and redirect "Edit a bot" to "Manage a bot".
2025-03-17 10:52:25 -07:00
user_agent.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
user_counts.py
ruff: Fix UP006 Use list instead of List for type annotation.
2024-07-13 22:28:22 -07:00
user_groups.py
user_groups: Add get_recursive_supergroups_union_for_groups.
2025-03-27 16:53:35 -07:00
user_message.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
user_status.py
ruff: Fix UP007 Use X | Y for type annotations.
2024-07-13 22:28:22 -07:00
user_topics.py
user_topics: Use a list instead of tuple for muted_topics.
2025-03-17 14:21:37 -07:00
users.py
custom_profile_fields: Restrict access to users in the same realm.
2025-03-28 16:56:11 -07:00
utils.py
mattermost_import: Log when processing messages.
2025-05-21 17:03:59 -07:00
validator.py
endpoints: Remove the has_request_variables decorator.
2024-09-05 16:02:12 -07:00
widget.py
python: Simplify with str.removeprefix, str.removesuffix.
2024-09-03 12:30:16 -07:00
zcommand.py
python: Simplify with str.removeprefix, str.removesuffix.
2024-09-03 12:30:16 -07:00
zephyr.py
zephyr: Switch from py3dns to dnspython.
2025-02-25 11:53:08 -08:00
zulip_update_announcements.py
updates: Add update message (level=15).
2025-03-20 11:44:33 -07:00