Mike Dalessio 1ad52d2590 Only send notification emails to verified users ...

Adds verified? check to bundling_emails? to prevent notification emails
from being sent to users who have never authenticated. This closes the
spam vector where bad actors could create users for known email
addresses and trigger unwanted notifications by mentioning them.

Co-Authored-By: Claude <noreply@anthropic.com>

2025-12-05 21:51:44 -05:00

..

day_timeline

Fix that 'closed'->'done' change broke this route

2025-11-26 14:58:17 -06:00

accessor.rb

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

assignee.rb

Rename bubbles => cards

2025-04-09 14:50:58 +02:00

attachable.rb

Move inside concerns or the override won't work

2025-07-03 23:06:37 +02:00

avatar.rb

Don't allow SVG avatar uploads in the first place

2025-12-04 14:27:28 +00:00

configurable.rb

Generate highlights in the user timezone, now that we persist it

2025-09-05 12:39:09 +02:00

day_timeline.rb

Preload Event to avoid N+1s on the timeline

2025-11-27 11:27:10 -05:00

email_address_changeable.rb

Render friendly error message when using an invalid token

2025-12-03 15:37:27 +01:00

filtering.rb

Scope model methods by account

2025-11-17 09:12:41 -05:00

mentionable.rb

Add prompts to the rest of rich text editors

2025-06-19 13:34:44 +02:00

named.rb

Move to concern

2025-04-26 19:26:34 -05:00

notifiable.rb

Handle notifs created before the current bundle starts_at

2025-11-22 22:38:23 -05:00

role.rb

Introduce an "owner" role, and prevent it from being administered

2025-11-29 14:13:29 -05:00

searcher.rb

Don't use Current.account for search records

2025-11-25 11:34:41 +00:00

settings.rb

Only send notification emails to verified users

2025-12-05 21:51:44 -05:00

timelined.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

transferable.rb

Add session transfer feature

2024-12-18 12:38:53 -06:00

watcher.rb

Update User so that it can be cleanly destroyed

2025-09-30 14:44:38 -04:00