once-campfire

mirror of https://github.com/basecamp/once-campfire.git synced 2026-09-26 02:04:55 +09:00

Files

T

Sam Ruby 0ed0af44ef Mint the tampered sgid without extending a Room

The invalid-sgid test made one live Room attachable — `rooms(:pets).tap
{ |r| r.extend ActionText::Attachable }` — only to call
`attachable_sgid` on it. That method is `to_sgid(expires_in: nil,
for: ActionText::Attachable::LOCATOR_NAME).to_s`, so the test can mint
the same sgid directly and drop the per-instance extend; the assertion
(a signature that does not verify resolves to MissingAttachable) is
unchanged, and so are the bytes it tampers with.

2026-09-20 11:19:14 -04:00

channels

Scope the unread rooms stream per user

2026-08-03 14:55:19 -07:00

controllers

Merge pull request #276 from basecamp/card-7348960853-room-render-injection

2026-09-11 21:29:14 +02:00

fixtures

Allow bots to delete their own boosts

2026-08-11 14:13:01 +02:00

helpers

Harden message content filtering + bump thruster to 0.1.23 (#237 )