Jeremy Daer 160ba295b5 End sign-in links made before a password change ...

A transfer link signed only the user id, so one copied before the
password changed still started a session for up to four hours after.
Bind it to the password salt with generates_token_for, so a new
password ends those links too. Links made before this upgrade stop
working; they last four hours at most.

2026-10-19 11:36:16 -07:00

..

avatar_test.rb

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

bannable_test.rb

Apply the same user filter to every page of account members

2026-10-05 15:19:21 +02:00

bot_test.rb

Hello world

2025-08-21 09:31:59 +01:00

role_test.rb

Hello world

2025-08-21 09:31:59 +01:00

transferable_test.rb

End sign-in links made before a password change

2026-10-19 11:36:16 -07:00