public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-03-17 11:43:37 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
baa2bfc713cb2c8558531e07b01e067efee23cd0
once-campfire/app/models/user
History
Jacopo 3d0a10dbdd Security: Fix user impersonation via custom bot token 
If bot_key has no right-hand side (ex: 1-), bot_token will be nil, and the query will match a User record if bot_id matches a valid ID.
Fix it relying on `active_bots` instead.
2025-09-11 12:32:46 +02:00
..
avatar.rb
Hello world
2025-08-21 09:31:59 +01:00
bot.rb
Security: Fix user impersonation via custom bot token
2025-09-11 12:32:46 +02:00
mentionable.rb
Hello world
2025-08-21 09:31:59 +01:00
role.rb
Upgrade to Rails 8 and Ruby 3.4.5 (#1)
2025-09-02 17:02:41 +02:00
transferable.rb
Hello world
2025-08-21 09:31:59 +01:00