public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-03-17 11:43:37 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
baa2bfc713cb2c8558531e07b01e067efee23cd0
once-campfire/app/models
History
Jacopo 3d0a10dbdd Security: Fix user impersonation via custom bot token 
If bot_key has no right-hand side (ex: 1-), bot_token will be nil, and the query will match a User record if bot_id matches a valid ID.
Fix it relying on `active_bots` instead.
2025-09-11 12:32:46 +02:00
..
account
Hello world
2025-08-21 09:31:59 +01:00
concerns
Hello world
2025-08-21 09:31:59 +01:00
membership
Hello world
2025-08-21 09:31:59 +01:00
message
Hello world
2025-08-21 09:31:59 +01:00
opengraph
Upgrade to Rails 8 and Ruby 3.4.5 (#1)
2025-09-02 17:02:41 +02:00
push
Hello world
2025-08-21 09:31:59 +01:00
room
Hello world
2025-08-21 09:31:59 +01:00
rooms
Hello world
2025-08-21 09:31:59 +01:00
user
Security: Fix user impersonation via custom bot token
2025-09-11 12:32:46 +02:00
account.rb
Hello world
2025-08-21 09:31:59 +01:00
application_platform.rb
Hello world
2025-08-21 09:31:59 +01:00
application_record.rb
Hello world
2025-08-21 09:31:59 +01:00
boost.rb
Hello world
2025-08-21 09:31:59 +01:00
current.rb
Hello world
2025-08-21 09:31:59 +01:00
first_run.rb
Hello world
2025-08-21 09:31:59 +01:00
membership.rb
Upgrade to Rails 8 and Ruby 3.4.5 (#1)
2025-09-02 17:02:41 +02:00
message.rb
Hello world
2025-08-21 09:31:59 +01:00
purchaser.rb
Hello world
2025-08-21 09:31:59 +01:00
push.rb
Hello world
2025-08-21 09:31:59 +01:00
room.rb
Hello world
2025-08-21 09:31:59 +01:00
search.rb
Hello world
2025-08-21 09:31:59 +01:00
session.rb
Hello world
2025-08-21 09:31:59 +01:00
sound.rb
Hello world
2025-08-21 09:31:59 +01:00
user.rb
Hello world
2025-08-21 09:31:59 +01:00
webhook.rb
Upgrade to Rails 8 and Ruby 3.4.5 (#1)
2025-09-02 17:02:41 +02:00