Alex Vandiver c726d2ec01 thumbnail: Do not Camo old thumbor URLs; serve images directly. ...

Providing a signed Camo URL for arbitrary URLs opened the server up to
being an open redirector.  Return 403 if the URL is not a user upload,
and the backend image if it is.  Since we do not have ImageAttachment
rows for uploads at a time we wrote `/thumbnail?` URLs, return the
full-size content.

2024-07-24 16:04:34 -07:00

..

__init__.py

…

cache.py

models: Extract zerver.models.clients.

2023-12-16 22:08:44 -08:00

camo.py

thumbnail: Do not Camo old thumbor URLs; serve images directly.

2024-07-24 16:04:34 -07:00

dev_login.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

email_log.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

integrations.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

registration.py

registration: Ask user how they found Zulip.

2024-04-01 12:44:12 -07:00