Jeremy Daer c78c3fd7ef Sign out the account's other sessions when its password changes ...

Changing the password is how someone shuts out whoever else is signed
in to their account, but every session opened with the old password
stayed valid. Now the others end and their live connections close, as
on sign-out. The session the password was changed from stays signed in.

Changing the password outside a request, as from a console, ends every
session.

2026-10-19 10:28:06 -07:00

..

push_subscriptions

Hello world

2025-08-21 09:31:59 +01:00

avatars_controller.rb

Disable libvips unfuzzed operations (#226)

2026-07-28 11:57:57 -04:00

bans_controller.rb

Add IP-based user banning

2025-11-26 14:30:38 +00:00

profiles_controller.rb

Sign out the account's other sessions when its password changes

2026-10-19 10:28:06 -07:00

push_subscriptions_controller.rb

Guard push-subscription endpoints against SSRF (#265)

2026-08-28 11:44:39 -07:00

sidebars_controller.rb

Reuse authorized read pages without stale presentation or CSRF masks

2026-10-07 20:02:20 +02:00