Jeremy Daer aa93269ceb Look the endpoint up past the query cache, and keep a subscription a race refused ...

The lookup under the write lock repeated the one made before
validation, so the query cache could answer it with that earlier miss
even after another connection had registered the endpoint. It runs
uncached now.

Enabling notifications unsubscribed the browser on any refusal, so a
session signed out between authenticating and saving lost the browser's
subscription too, and the next session had nothing to post. Only a
refused endpoint unsubscribes it now.

2026-10-19 13:34:34 -07:00

..

controllers

Look the endpoint up past the query cache, and keep a subscription a race refused

2026-10-19 13:34:34 -07:00

helpers

Keep one escapeHTML, and make it safe in an attribute

2026-09-11 21:10:57 +02:00

initializers

Replace Trix with Lexxy

2026-09-26 09:13:27 +02:00

lib

Ask for JSON when autocompleting people to ping

2026-10-04 20:06:53 -04:00

models

Use header-only forgery protection and cache complete responses

2026-10-08 09:05:10 +02:00

application.js

Replace Trix with Lexxy

2026-09-26 09:13:27 +02:00