Anders Kaseorg 744b7c7382 custom_profile_fields: Restrict access to users in the same realm. ...

This fixes CVE-2025-30369.

Signed-off-by: Anders Kaseorg <anders@zulip.com>

2025-03-28 16:56:11 -07:00

..

actions

user_groups: Send metadata access related events on remove subgroups.

2025-03-27 16:53:35 -07:00

data_import

slack_import: Fix thread conversion condition.

2025-03-27 21:53:31 -07:00

integration_fixtures/nagios

…

lib

custom_profile_fields: Restrict access to users in the same realm.

2025-03-28 16:56:11 -07:00

management

export: Also add guardrail to the management command.

2025-03-28 16:52:44 -07:00

migrations

migration: Fix topic name for imported DMs from third-party exports.

2025-03-27 21:53:31 -07:00

models

message: Move join to recipients outside of LIMIT, via CTE.

2025-03-27 16:53:35 -07:00

openapi

typing: Rename "(no topic)" to empty string topic.

2025-03-27 21:53:31 -07:00

tests

export: Also add guardrail to the management command.

2025-03-28 16:52:44 -07:00

tornado

queue: Round-trip events through orjson in tests.

2025-03-18 11:53:51 -07:00

transaction_tests

test_user_groups: Add durable=True to the independent transaction.

2024-11-21 14:55:15 -08:00

views

custom_profile_fields: Restrict access to users in the same realm.

2025-03-28 16:56:11 -07:00

webhooks

addressee: Rename "(no topic)" to empty string topic.

2025-03-19 11:39:28 -07:00

worker

deliver_scheduled_emails: Use a queue, instead of infinite retries.

2025-03-04 16:09:25 -08:00

__init__.py

…

apps.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

context_processors.py

portico: Replace "Find accounts" link with "Log in".

2025-01-24 14:55:47 -08:00

decorator.py

settings: Add "can_manage_billing_group" realm setting.

2025-03-10 09:36:30 -07:00

filters.py

filters: Do not report AVATAR_SALT, or other salts.

2025-03-13 09:36:07 -07:00

forms.py

errors: Standardize "already in use" error messages.

2025-03-04 16:10:25 -08:00

logging_handlers.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

middleware.py

message_summary: Log time to generate summary.

2025-02-06 12:03:24 -08:00

signals.py

send_email: Set the Date header according to local enqueue time.

2025-03-10 16:48:08 -07:00