public/once-campfire
1
0 Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-10-28 00:16:48 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
2e83b56860597d592d069ff9ffca43f1b53354c0
once-campfire/app/models
T
History
Jeremy Daer 09402c7752 Read the password digest past the query cache 
A digest cached earlier in the request would let the check pass on a password that has since changed.

(cherry picked from commit c3faccb0f4)
2026-10-20 20:45:36 -07:00
..
account
Hello world
2025-08-21 09:31:59 +01:00
concerns
Hello world
2025-08-21 09:31:59 +01:00
membership
Hello world
2025-08-21 09:31:59 +01:00
message
Bound accessible search probes and reject invalid benchmark responses
2026-10-07 14:22:07 +02:00
opengraph
Don't let an http_proxy environment variable bypass the pinned address in link previews
2026-10-17 01:11:38 -07:00
push
Count unread rooms for push badges once per batch
2026-10-05 16:49:59 +02:00
room
Stop sending push notifications to banned users (#338)
2026-10-07 11:25:16 -07:00
rooms
Find a direct room with one query instead of checking every one
2026-10-05 04:06:17 +02:00
user
End sign-in links made before a password change
2026-10-19 11:37:05 -07:00
account.rb
Disable libvips unfuzzed operations (#226)
2026-07-28 11:57:57 -04:00
application_platform.rb
Hello world
2025-08-21 09:31:59 +01:00
application_record.rb
Hello world
2025-08-21 09:31:59 +01:00
ban.rb
Add IP-based user banning
2025-11-26 14:30:38 +00:00
boost.rb
Hello world
2025-08-21 09:31:59 +01:00
current.rb
Delete server-side session on logout
2026-01-16 09:31:22 +01:00
first_run.rb
Hello world
2025-08-21 09:31:59 +01:00
membership.rb
Compose sidebar lists from existing room scopes
2026-10-05 12:48:29 +00:00
message.rb
Merge commit from fork
2026-10-07 01:41:12 -07:00
purchaser.rb
Hello world
2025-08-21 09:31:59 +01:00
push.rb
Hello world
2025-08-21 09:31:59 +01:00
room.rb
Reset former members' connections and grant open rooms in one statement
2026-10-06 14:45:18 +02:00
search.rb
Hello world
2025-08-21 09:31:59 +01:00
session.rb
Read the password digest past the query cache
2026-10-20 20:45:36 -07:00
sound.rb
Hello world
2025-08-21 09:31:59 +01:00
user.rb
Check the current password whenever the saved password changes
2026-10-19 15:12:25 -07:00
webhook.rb
Post a webhook reply as an attachment only when the bot answered 200
2026-10-05 02:58:11 +02:00