Mike Dalessio b6ea558de8 Move TrackTrueClientIp middleware into saas engine (#2677) ...

The True-Client-IP header is set by Cloudflare and is only trustworthy
when behind a Cloudflare proxy. In non-Cloudflare deployments, this
header is attacker-controlled and can be used to spoof IP addresses.

Moving the middleware into the saas engine ensures it only loads for our
Cloudflare-fronted production deployment, not for self-hosted OSS
instances.

GHSA-cpch-9qg2-x8fq

2026-03-09 15:14:17 -04:00

..

environments

Cache public pages for 5 mins, not 1 year

2026-01-28 14:30:43 +00:00

initializers

Move TrackTrueClientIp middleware into saas engine (#2677)

2026-03-09 15:14:17 -04:00

locales

New Rails app

2024-06-21 13:19:56 +01:00

application.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

boot.rb

New Rails app

2024-06-21 13:19:56 +01:00

brakeman.ignore

Bump the development-dependencies group across 1 directory with 3 updates (#2546)

2026-02-16 15:29:51 -08:00

cable.yml

Configure a reading: connection for solid gems

2025-11-17 09:12:41 -05:00

cache.yml

Use separate cache namespaces for each beta instance

2026-01-12 20:28:18 +01:00

ci.rb

Bundle drift detection and correction (#2101)

2025-12-11 21:32:34 -08:00

database.mysql.yml

make MySQL SSL mode configurable via env var (#2036)

2025-12-10 13:22:38 -08:00

database.sqlite.yml

Updated database.sqlite.yml

2025-12-02 16:11:10 -05:00

database.yml

Integrate fizzy-saas as vendored gem at saas/

2025-12-16 12:25:22 -08:00

deploy.yml

Add BASE_URL environment variable

2025-12-19 12:21:37 +00:00

environment.rb

New Rails app

2024-06-21 13:19:56 +01:00

importmap.rb

Render inline code in card titles (#2518)

2026-02-12 12:07:40 -05:00

puma.rb

In non-SaaS, run jobs in container by default

2025-12-10 12:32:35 +00:00

queue.yml

Remove explicit queue definition

2026-01-12 15:16:33 +01:00

recurring.yml

Reduce webhook delivery cleanup impact (#2550)

2026-02-16 14:28:05 -08:00

routes.rb

Add constrained route.

2026-02-24 11:25:43 +01:00

storage.oss.yml

rename Active Storage service to s3 and add checksum env

2025-12-08 18:33:27 -06:00

storage.yml

require_relative doesn't work as expected in ERB templates

2025-11-28 13:39:47 -05:00