Marcello Costagliola a196a93ed2 Bound how long link unfurling can hold a request ...

Opengraph::Fetch runs inside POST /unfurl_link, against a host the member
picked, with Net::HTTP's defaults: 60 s to connect, 60 s for each read, and
one retry of the GET. A per-read timeout doesn't bound a host that sends a
byte at a time, in its headers or its body, so nothing limited how long a
fetch could hold the request thread.

Give each operation 7 s, as Webhook does, turn off the retry, and put the
whole fetch, redirects included, under one 10 s deadline.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Bj8KnxpTf9sj2Ysa8aLAVa

2026-10-06 13:43:34 +02:00

..

channels

Update Rails to main

2026-10-05 11:45:37 -04:00

controllers

Compile the PWA help and account settings through Herb

2026-10-05 11:45:06 -04:00

fixtures

Hash fixture passwords at minimum bcrypt cost

2026-09-29 09:53:39 +07:00

helpers

Test that Trix-formatted messages render and survive editing

2026-09-26 10:21:40 +02:00

lib

Run the link preview hardening tests against both stored forms

2026-09-26 09:59:13 +02:00

models

Bound how long link unfurling can hold a request

2026-10-06 13:43:34 +02:00

performance

Hello world

2025-08-21 09:31:59 +01:00

system

Ask for JSON when autocompleting people to ping

2026-10-04 20:06:53 -04:00

test_helpers

Rebuild every attachment before editing a message

2026-09-26 09:51:05 +02:00

application_system_test_case.rb

Replace Trix with Lexxy

2026-09-26 09:13:27 +02:00

test_helper.rb

Update Rails to main

2026-10-05 11:45:37 -04:00