Rosa Gutierrez eceec2898b Keep a link preview's link and image off this Campfire's own host ...

A preview belongs to the page it previews, so both URLs point somewhere
else. An absolute URL on our own host passed the scheme and host checks,
and every reader's browser fetched it with their session attached, which
turns a message into a GET request made on the reader's behalf.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0186eyzivcTn6wqjEE4Wnxdt

2026-09-11 19:08:54 +02:00

..

action_text_attachables_test.rb

Use urlsafe base64 decode

2025-12-02 11:34:12 +01:00

actiontext_opengraph_embeds_test.rb

Keep a link preview's link and image off this Campfire's own host

2026-09-11 19:08:54 +02:00

log_scrubbing_formatter_test.rb

Redact bot key from request logs (#269)

2026-09-01 12:40:55 -07:00