Mike Dalessio 1ad52d2590 Only send notification emails to verified users ...

Adds verified? check to bundling_emails? to prevent notification emails
from being sent to users who have never authenticated. This closes the
spam vector where bad actors could create users for known email
addresses and trigger unwanted notifications by mentioning them.

Co-Authored-By: Claude <noreply@anthropic.com>

2025-12-05 21:51:44 -05:00

..

account

Fix crash in join code redemption race condition

2025-12-03 13:29:20 +01:00

board

Fix tests after the removal of memberships

2025-11-17 09:12:40 -05:00

card

Only broadcast when the preview changes, use the _later variant for the broadcast, add tests

2025-12-05 10:09:20 +01:00

column

Keep current logical names for colors

2025-11-14 11:44:04 +01:00

comment

Don't use Current.account for search records

2025-11-25 11:34:41 +00:00

concerns

Fix: not detecting mentions when publishing saved drafts

2025-12-01 15:39:45 +01:00

event

Always use the creator name for the plain text form

2025-11-06 14:16:01 +01:00

filter

Deduplicate filter results

2025-11-19 17:51:38 -05:00

identity

Fix crash in join code redemption race condition

2025-12-03 13:29:20 +01:00

magic_link

Add sign in flow using magic links

2025-10-31 16:22:12 +01:00

notification

Update test for copy changes

2025-11-25 16:10:34 -06:00

notifier

Drop User.system and replace with Account#system_user

2025-11-24 13:23:57 -05:00

search

Remove all special charaters when stemming

2025-11-17 09:12:17 -05:00

signup

Bring simple signup flow from the fizzy-saas gem

2025-11-28 15:53:58 +01:00

user

Only send notification emails to verified users

2025-12-05 21:51:44 -05:00

webhook

Fix ipaddr setter

2025-12-05 20:43:56 +01:00

access_test.rb

Fix more tests

2025-11-17 09:12:31 -05:00

account_test.rb

Add verified_at timestamp to use for spam prevention

2025-12-05 21:51:44 -05:00

assignment_test.rb

Add assignees to a bubble WIP

2024-09-17 17:10:23 -05:00

card_test.rb

Remove a bunch of N+1s

2025-11-27 11:08:45 -05:00

column_limits_test.rb

Enforce SQLite column limits via CHECK constraints

2025-11-26 09:50:29 +00:00

column_test.rb

Revert "Revert "Color a11y""

2025-11-14 11:24:55 +01:00

comment_test.rb

Fix skipped tests

2025-11-17 09:12:41 -05:00

entropy_test.rb

Account.sole → Current.account

2025-11-17 09:11:40 -05:00

filter_test.rb

Scope the single-board case to just the creator's boards (#1880)

2025-12-03 15:47:04 -08:00

identity_test.rb

Validate Identity email address

2025-12-04 14:01:15 -05:00

magic_link_test.rb

Make sign up Magic Links work across devices

2025-11-29 12:36:00 +01:00

notification_test.rb

Broadcast notifications that are deleted

2025-09-10 09:50:22 +02:00

qr_code_link_test.rb

Add session transfer feature

2024-12-18 12:38:53 -06:00

reaction_test.rb

Reactions reset entropy

2025-06-05 16:07:19 +02:00

search_test.rb

Don't use Current.account for search records

2025-11-25 11:34:41 +00:00

signup_test.rb

Format

2025-11-28 15:53:58 +01:00

tag_test.rb

Introduce a recurring job to delete unused tags

2025-05-14 12:35:52 -04:00

time_window_parser_test.rb

Add support for filtering by creation or completion windows of times

2025-06-27 13:38:22 +02:00

user_test.rb

Add verified_at timestamp to use for spam prevention

2025-12-05 21:51:44 -05:00

webhook_test.rb

Introduce gitleaks to the codebase

2025-11-26 15:46:47 -05:00