David Heinemeier Hansson 0ce3a85778 Only allow writing when the access token has permission

2025-12-10 09:23:52 +01:00

..

authentication.rb

Only allow writing when the access token has permission

2025-12-10 09:23:52 +01:00

authorization.rb

Only staff can access beta/staging

2025-11-28 15:53:58 +01:00

block_search_engine_indexing.rb

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

board_scoped.rb

…

card_scoped.rb

Use Card number as the model param

2025-11-17 09:12:41 -05:00

column_scoped.rb

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

current_request.rb

…

current_timezone.rb

…

day_timelines_scoped.rb

…

filter_scoped.rb

…

request_forgery_protection.rb

Switch from report-only to actually using Sec-Fetch-Site for CSRF protection

2025-11-28 16:26:03 +01:00

routing_headers.rb

Add routing header to see who served request

2025-11-17 09:12:41 -05:00

set_platform.rb

…

turbo_flash.rb

…

view_transitions.rb

…