Jeremy Daer c6e0105491 Close live connections from the model on any password change ...

The sessions end wherever the password changes, but only the profile
page closed the live connections, so a change from a console left a
signed-out device receiving messages until it dropped. Close them after
commit from User, logging rather than failing if the realtime service
can't be reached, since the password is saved by then.

2026-10-19 10:33:46 -07:00

..

push_subscriptions

Hello world

2025-08-21 09:31:59 +01:00

avatars_controller.rb

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

bans_controller.rb

Add IP-based user banning

2025-11-26 14:30:38 +00:00

profiles_controller.rb

Close live connections from the model on any password change

2026-10-19 10:33:46 -07:00

push_subscriptions_controller.rb

Guard push-subscription endpoints against SSRF (#265)

2026-08-28 11:44:39 -07:00

sidebars_controller.rb

Reuse authorized read pages without stale presentation or CSRF masks

2026-10-07 20:02:20 +02:00