Marcello Costagliola 1e61cfc8f3 Reject a QR code request that can't become a QR code ...

QrCodeController#show is open without signing in and decodes its id as
URL-safe base64. An id that isn't base64 raised ArgumentError, and a
URL longer than a QR code holds raised QRCodeRunTimeError, so both
answered 500 and reached error reporting as server errors. Answer them
with 400 instead.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LwoX7uRy5vFZSNKJhSqMSG

2026-10-06 22:53:47 +02:00

..

accounts

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

autocompletable

Hello world

2025-08-21 09:31:59 +01:00

concerns

Add IP-based user banning

2025-11-26 14:30:38 +00:00

messages

Wire the inline boost link to the soft keyboard

2026-10-04 20:06:53 -04:00

rooms

Scope room lookup to the type each controller administers

2026-08-03 14:55:04 -07:00

sessions

Hello world

2025-08-21 09:31:59 +01:00

users

Find the Edge install icon under images/external

2026-10-04 20:06:53 -04:00

.keep

Hello world

2025-08-21 09:31:59 +01:00

accounts_controller_test.rb

Compile the PWA help and account settings through Herb

2026-10-05 11:45:06 -04:00

active_storage_authentication_test.rb

Require authentication for Active Storage direct uploads (#267)

2026-08-30 10:24:41 -07:00

first_runs_controller_test.rb

Address race condition during "first run" account creation

2025-12-12 10:51:28 -05:00

messages_caching_test.rb

Preload only uncached messages and reduce rendering overhead (#292)

2026-10-04 12:36:36 -04:00

messages_controller_test.rb

Scope the unread rooms stream per user

2026-08-03 14:55:19 -07:00

qr_code_controller_test.rb

Reject a QR code request that can't become a QR code

2026-10-06 22:53:47 +02:00

rooms_controller_test.rb

Compile the PWA help and account settings through Herb

2026-10-05 11:45:06 -04:00

searches_controller_test.rb

Search for operator words instead of parsing them

2026-10-05 01:08:53 +02:00

sessions_controller_test.rb

Close live Action Cable connections on sign out (#268)

2026-08-31 18:21:16 -07:00

unfurl_links_controller_test.rb

Cover markup-only OpenGraph title and description in link previews

2026-09-11 21:11:13 +02:00

users_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00

welcome_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00