Steve Howell 5f73164210 poll widget: Prevent question updates from non-authors. ... We now ignore question edits if the sender of the submessage is not the message author. The webapp UI prevents folks from editing the question for somebody else's poll, but a determined person could use our low level API to do it. We will add safeguards on the server side for this, but this change is sufficient to protect the webapp (and mobile when they upgrade the library).		2021-06-14 17:46:16 -07:00
..
node_tests	poll widget: Prevent question updates from non-authors.	2021-06-14 17:46:16 -07:00
puppeteer_lib	custom_check: Avoid use of assert to avoid confusion with assert.equal.	2021-06-10 09:15:57 -07:00
puppeteer_tests	puppeteer: Fix the selector for opening the message action menu.	2021-06-12 09:00:57 -04:00
zjsunit	zjsunit: Remove unnecessary Handlebars wrapper function.	2021-06-14 12:20:56 -07:00