Rosa Gutierrez 3fcf5a9d08 Require authorization for direct uploads ...

Respond with 403 to JSON requests that are unauthorized, instead of
redirecting.

2025-12-23 11:08:51 +01:00

..

account

Add validation for the join code usage limit

2025-12-10 10:10:08 -05:00

boards

replace destroy column turbo stream for redirect_back_or_to

2025-12-11 10:42:44 +01:00

cards

Add UI to prevent assigning more than 10 asignees

2025-12-15 16:40:52 +01:00

columns

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

concerns

Require authorization for direct uploads

2025-12-23 11:08:51 +01:00

events

More robust implementation to prevent method injection attacks

2025-11-21 10:38:16 +01:00

filters

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

my

Revert "Merge pull request #1865 from basecamp/public-avatar-caching"

2025-12-15 13:07:13 +00:00

notifications

Add API for reading notifications

2025-12-10 09:23:52 +01:00

prompts

Use Card number as the model param

2025-11-17 09:12:41 -05:00

public

Show only public cards on public boards

2025-12-15 13:15:36 +01:00

searches

Remove anemic concern

2025-11-03 15:27:12 +01:00

sessions

Replace handle_ naming

2025-12-19 19:21:58 +01:00

signups

Stub welcome letter for newly created accounts

2025-12-19 15:36:52 -06:00

users

Revert "Merge pull request #1865 from basecamp/public-avatar-caching"

2025-12-15 13:07:13 +00:00

webhooks

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

admin_controller.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

application_controller.rb

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

boards_controller.rb

🐛 fix: resolve stale account names in jump menu and page titles

2025-12-15 15:59:25 +08:00

cards_controller.rb

Remove status from allowed parameters in CardsController#update

2025-12-19 22:35:30 +01:00

events_controller.rb

Remove unnecessary filtering code

2025-10-03 10:56:34 +02:00

filters_controller.rb

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

join_codes_controller.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller.rb

Ensure the flash notice passes through the redirect

2025-12-20 18:04:56 -06:00

notifications_controller.rb

Lower the number of returned unread notifications

2025-12-10 09:23:52 +01:00

pwa_controller.rb

Fix authentication on "untenanted" controllers

2025-11-17 09:11:47 -05:00

qr_codes_controller.rb

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

searches_controller.rb

Inline anemic method

2025-11-18 15:48:40 +01:00

sessions_controller.rb

Replace handle_ naming

2025-12-19 19:21:58 +01:00

signups_controller.rb

Naming

2025-12-11 11:20:43 +00:00

tags_controller.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller.rb

Handle user update failures

2025-12-10 09:23:53 +01:00

webhooks_controller.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00