Jeremy Daer 9f6a4f1cc6 Fix unauthorized column reordering ...

Users could reorder columns they didn't have access to. Fixed by
limiting ColumnScoped to User::Accessor#accessible_columns.

References https://hackerone.com/reports/3449905

2025-12-03 13:00:49 -08:00

..

channels/application_cable

+ connection_test.rb

2025-12-03 16:40:44 +03:00

controllers

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

fixtures

+ connection_test.rb

2025-12-03 16:40:44 +03:00

helpers

Capitalize

2025-11-19 16:47:02 -06:00

jobs

Remove Fizzy Ask

2025-10-27 14:45:30 +01:00

lib

Drop the "max previewable file size" limit

2025-11-21 10:55:20 -05:00

mailers

Fix test

2025-12-02 08:26:09 +00:00

models

Fix crash in join code redemption race condition

2025-12-03 13:29:20 +01:00

system

Make system test stable

2025-11-18 10:20:02 +01:00

test_helpers

Split sqlite/mysql record stuff

2025-11-21 09:15:19 +00:00

application_system_test_case.rb

Introduce a few system tests

2025-09-13 13:18:32 -04:00

routes_test.rb

Rename Entropy::Configuration to just Entropy

2025-11-02 13:11:41 +01:00

test_helper.rb

Make open source the default, and check for sass instead

2025-11-28 15:53:48 +01:00