junyi pushed to master at chiu/Application_Form 2026-10-24 05:17:21 +00:00
916f5c3ed8 Escape user input before building regexps
junyi pushed to master at chiu/recruitment_mod 2026-10-24 05:17:20 +00:00
63b50a9985 Escape user input before building regexps
junyi pushed to master at chiu/event_news 2026-10-24 05:17:19 +00:00
eab0fb4d9b Escape user input before building regexps
junyi pushed to master at spen/seminar 2026-10-24 05:17:17 +00:00
93cc261752 Escape user input before building regexps
junyi pushed to master at harrybomrah/curation 2026-10-24 05:17:16 +00:00
c74af93eee Escape user input before building regexps
junyi pushed to master at saurabh/announcement-test 2026-10-24 05:17:15 +00:00
68a7c8f45c Escape user input before building regexps
junyi pushed to master at junyi/sync_personal_data_task_for_nf… 2026-10-23 12:50:14 +00:00
f1c2d5f405 更新 README.md
junyi pushed to master at chiu/sync_personal_data_task_for_nfu 2026-10-23 12:49:33 +00:00
1eea613702 更新 README.md
junyi pushed to master at junyi/sync_personal_data_task_for_nf… 2026-10-23 08:57:56 +00:00
b2d69c2a9e Bind API to 127.0.0.1, use bind variables, move Oracle credentials to site initializer
junyi pushed to master at chiu/sync_personal_data_task_for_nfu 2026-10-23 07:44:27 +00:00
790c779d07 Bind API to 127.0.0.1, use bind variables, move Oracle credentials to site initializer
junyi pushed to master at junyi/seminar-rails7 2026-10-22 08:06:46 +00:00
3dc9ff1f42 Rails 7: use empty? instead of count on ActionController::Parameters in admin update
junyi pushed to master at junyi/seminar-rails7 2026-10-22 07:42:24 +00:00
d60ab5cef3 Restore frontend contribution editing, whitelist params and restrict edit page to owner
junyi pushed to master at spen/seminar 2026-10-22 07:40:56 +00:00
50c4b93b27 Restore frontend contribution editing, whitelist params and restrict edit page to owner
junyi pushed to master at junyi/application_form-rails7 2026-10-22 06:28:27 +00:00
d801cd7b03 Disable unused contribution routes that allowed unauthenticated file upload
junyi pushed to master at chiu/Application_Form 2026-10-22 06:23:16 +00:00
12f6bc5f8a Disable unused contribution routes that allowed unauthenticated file upload
junyi pushed to master at junyi/application_form-rails7 2026-10-21 10:29:15 +00:00
780234639c Rails 7: init @@session in frontend methods to avoid uninitialized class variable error
junyi pushed to master at junyi/seminar-rails7 2026-10-21 10:25:50 +00:00
c42a499c1a Rails 7: init @@session in frontend methods and use extension_denylist to avoid deprecation crash
junyi pushed to master at junyi/seminar-rails7 2026-10-21 08:47:55 +00:00
d8dbb9d068 Block dangerous upload extensions and enforce owner-only edit/delete for seminar contributions
junyi pushed to master at junyi/links-rails7 2026-10-21 04:44:04 +00:00
b4b56345ba Merge upstream create redirect fix into rails7
bcbaf5eca9 Redirect to index after create unless coming from the index page
d2569c90c0 Merge upstream order_position fixes into rails7
1294c3b2b1 Fix order_position duplicates from concurrent updateorder and prevent stale table re-render after save
Compare 4 commits »
junyi pushed to master at saurabh/links 2026-10-21 04:40:18 +00:00
bcbaf5eca9 Redirect to index after create unless coming from the index page