Rosa Gutierrez eceec2898b Keep a link preview's link and image off this Campfire's own host ...

A preview belongs to the page it previews, so both URLs point somewhere
else. An absolute URL on our own host passed the scheme and host checks,
and every reader's browser fetched it with their session attached, which
turns a message into a GET request made on the reader's behalf.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt

2026-09-11 19:08:54 +02:00

..

accounts

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

autocompletable

Hello world

2025-08-21 09:31:59 +01:00

concerns

Add IP-based user banning

2025-11-26 14:30:38 +00:00

messages

Allow bots to delete their own boosts

2026-08-11 14:13:01 +02:00

rooms

Scope room lookup to the type each controller administers

2026-08-03 14:55:04 -07:00

sessions

Hello world

2025-08-21 09:31:59 +01:00

users

Guard push-subscription endpoints against SSRF (#265)

2026-08-28 11:44:39 -07:00

.keep

Hello world

2025-08-21 09:31:59 +01:00

accounts_controller_test.rb

Group administrators separately from members with visual divider

2025-12-09 08:42:00 +05:30

active_storage_authentication_test.rb

Require authentication for Active Storage direct uploads (#267)

2026-08-30 10:24:41 -07:00

first_runs_controller_test.rb

Address race condition during "first run" account creation

2025-12-12 10:51:28 -05:00

messages_controller_test.rb

Scope the unread rooms stream per user

2026-08-03 14:55:19 -07:00

qr_code_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00

rooms_controller_test.rb

Keep a link preview's link and image off this Campfire's own host

2026-09-11 19:08:54 +02:00

searches_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00

sessions_controller_test.rb

Close live Action Cable connections on sign out (#268)

2026-08-31 18:21:16 -07:00

unfurl_links_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00

users_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00

welcome_controller_test.rb

Hello world

2025-08-21 09:31:59 +01:00