habitica-self-host/website/server/controllers/api-v3
Keith Holliday 1999e1098e Allow guilds edit (#8800)
* test: test that admin users can update guilds

* test: test admin removeMember privileges

* fix: allow admins to edit guilds

* fix: add edit guild options for admins

* test: test that admin can't remove current leader

* Add error msg for removing current leader

* Taskwoods Quest Line (#8156)

* feat(content): Gold Quest 2016-10

* chore(news): Bailey

* chore(i18n): update locales

* chore(sprites): compile

* 3.49.0

* chore: update express

* Fix for the ReDOS vulnerability

habitica is currently affected by the high-severity [ReDOS vulnerability](https://snyk.io/vuln/npm:tough-cookie:20160722). 

Vulnerable module: `tough-cookie`
Introduced through: ` request`

This PR fixes the ReDOS vulnerability by upgrading ` request` to version 2.74.0

Check out the [Snyk test report](https://snyk.io/test/github/HabitRPG/habitica) to review other vulnerabilities that affect this repo. 

[Watch the repo](https://snyk.io/add) to 
* get alerts if newly disclosed vulnerabilities affect this repo in the future. 
* generate pull requests with the fixes you want, or let us do the work: when a newly disclosed vulnerability affects you, we'll submit a fix to you right away. 

Stay secure, 
The Snyk team

* Documentation - coupon

closes #8109

* fix(client): Allow member hp to be clickable

fixes #8016
closes #8155

* chore(npm): shrinkwrap

* test: test isAbleToEditGroup

* Add isAbleToEditGroup to groupsCtrl

* Remove unnecessary ternary

* Fix linting

* Move edit permission logic out to groupsCtrl

* fix: change ternary to boolean

* Fix linting

* Fixed merge issues
2017-06-08 13:45:24 -07:00
..
tasks Group managers (#8591) 2017-04-25 08:28:56 -06:00
auth.js fix linter error 2017-04-06 22:03:33 +02:00
challenges.js Implemented new Achievement and Badge: Joined a Challenge (Fixes #8613) (#8761) 2017-06-07 09:43:16 -07:00
chat.js Disallow interactions by blocked users; new "get objections" Members API route (#8755) 2017-06-06 18:49:05 -07:00
content.js /v3/content documentation 2016-10-06 21:45:37 -05:00
coupon.js Documentation - coupon 2016-10-19 21:31:07 -05:00
debug.js ApiDoc - Development (#8480) 2017-02-16 08:53:21 -07:00
groups.js Allow guilds edit (#8800) 2017-06-08 13:45:24 -07:00
hall.js Improved API documentation for hall #8087 (#8536) 2017-06-06 11:48:11 -07:00
iap.js Format files to adhere to editorconfig (#7977) 2016-09-07 12:58:26 -05:00
members.js Disallow interactions by blocked users; new "get objections" Members API route (#8755) 2017-06-06 18:49:05 -07:00
modelsPaths.js apiDoc: meta (#8167) 2017-01-13 14:06:46 -07:00
notifications.js Login Incentives (#8230) 2016-11-23 19:34:09 -06:00
pushNotifications.js chore(docs): remove unneeded apiVersion param 2016-10-03 17:11:59 -05:00
quests.js Updating User API Doc (part 3) (#8720) 2017-06-06 18:57:17 -07:00
shops.js Release Mergeback 2017/05/03 (#8716) 2017-05-03 15:02:54 -05:00
status.js Api doc status (#8165) 2016-11-03 08:31:30 -05:00
tags.js Updating Tasks and Tags API Doc (#8447) 2017-02-01 19:37:27 +01:00
tasks.js Enabled repeatables (#8572) 2017-05-24 19:49:33 -05:00
user.js Updating User API Doc (part 3) (#8720) 2017-06-06 18:57:17 -07:00
webhook.js chore(docs): Add global definitions for param types 2016-10-11 21:35:58 -05:00