Marcello Costagliola 1e61cfc8f3 Reject a QR code request that can't become a QR code ...

QrCodeController#show is open without signing in and decodes its id as
URL-safe base64. An id that isn't base64 raised ArgumentError, and a
URL longer than a QR code holds raised QRCodeRunTimeError, so both
answered 500 and reached error reporting as server errors. Answer them
with 400 instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LwoX7uRy5vFZSNKJhSqMSG

2026-10-06 22:53:47 +02:00

..

accounts

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

autocompletable

Polish

2026-09-26 09:13:27 +02:00

concerns

Close live Action Cable connections on sign out (#268)

2026-08-31 18:21:16 -07:00

messages

Scope boosts to the current message

2026-08-11 14:33:05 +02:00

rooms

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

sessions

Hello world

2025-08-21 09:31:59 +01:00

users

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

accounts_controller.rb

Group administrators separately from members with visual divider

2025-12-09 08:42:00 +05:30

application_controller.rb

Add IP-based user banning

2025-11-26 14:30:38 +00:00

first_runs_controller.rb

Address race condition during "first run" account creation

2025-12-12 10:51:28 -05:00

messages_controller.rb

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

pwa_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

qr_code_controller.rb

Reject a QR code request that can't become a QR code

2026-10-06 22:53:47 +02:00

rooms_controller.rb

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

searches_controller.rb

Read the newest search matches off the index instead of sorting them all

2026-10-05 02:50:48 +02:00

sessions_controller.rb

Delete server-side session on logout

2026-01-16 09:31:22 +01:00

unfurl_links_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

users_controller.rb

Hello world

2025-08-21 09:31:59 +01:00

welcome_controller.rb

Hello world

2025-08-21 09:31:59 +01:00