public/once-campfire
1
0
Fork 0
mirror of https://github.com/basecamp/once-campfire.git synced 2026-03-12 05:05:16 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
v1.4.2
once-campfire/test/controllers/messages
History
Jacopo 3d0a10dbdd Security: Fix user impersonation via custom bot token 
If bot_key has no right-hand side (ex: 1-), bot_token will be nil, and the query will match a User record if bot_id matches a valid ID.
Fix it relying on `active_bots` instead.
2025-09-11 12:32:46 +02:00
..
boosts_controller_test.rb
Hello world
2025-08-21 09:31:59 +01:00
by_bots_controller_test.rb
Security: Fix user impersonation via custom bot token
2025-09-11 12:32:46 +02:00