Mike Dalessio 9aa15e9fb2 Forbid comments on draft cards ...

- Add Card#commentable? method that returns true only for published cards.
- CardsController#create ensures that the card is commentable.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-23 11:28:26 -05:00

..

account

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

board

Fix tests after the removal of memberships

2025-11-17 09:12:40 -05:00

card

Forbid comments on draft cards

2026-01-23 11:28:26 -05:00

column

Keep current logical names for colors

2025-11-14 11:44:04 +01:00

comment

prefactor: update search to use published cards

2026-01-23 11:07:43 -05:00

concerns

Forbid comments on draft cards

2026-01-23 11:28:26 -05:00

event

Fix HTML injection in webhooks through card titles

2025-12-22 12:20:32 +01:00

filter

prefactor: update search to use published cards

2026-01-23 11:07:43 -05:00

identity

Drop the need for access tokens to have a session

2025-12-10 09:23:52 +01:00

magic_link

Replace custom code generator with Base32

2025-12-12 07:45:23 +01:00

notification

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

notifier

Drop User.system and replace with Account#system_user

2025-11-24 13:23:57 -05:00

push

Allow chromium unstable endpoint

2025-12-09 20:24:09 -05:00

search

Revert "Add CJK (Chinese, Japanese, Korean) search support"

2026-01-08 21:07:14 +01:00

signup

Bring simple signup flow from the fizzy-saas gem

2025-11-28 15:53:58 +01:00

storage

Allow ActionText embed reuse and safe purge (#2346)

2026-01-12 10:30:18 -08:00

user

Rename method

2026-01-05 16:01:25 +01:00

webhook

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

access_test.rb

Delete pins belonging to cards in a board with revoked access

2026-01-13 16:25:59 +01:00

account_test.rb

Add verified_at timestamp to use for spam prevention

2025-12-05 21:51:44 -05:00

assignment_test.rb

Limit asignees to 10 per card

2025-12-15 16:40:52 +01:00

card_test.rb

Extract Card::Commentable

2026-01-23 10:30:12 -05:00

column_limits_test.rb

Enforce SQLite column limits via CHECK constraints

2025-11-26 09:50:29 +00:00

column_test.rb

Revert "Revert "Color a11y""

2025-11-14 11:24:55 +01:00

comment_test.rb

Forbid comments on draft cards

2026-01-23 11:28:26 -05:00

entropy_test.rb

Account.sole → Current.account

2025-11-17 09:11:40 -05:00

filter_test.rb

Scope the single-board case to just the creator's boards (#1880)

2025-12-03 15:47:04 -08:00

identity_test.rb

Fix Identity destruction callback ordering

2025-12-08 15:12:38 -05:00

magic_link_test.rb

Make sign up Magic Links work across devices

2025-11-29 12:36:00 +01:00

notification_pusher_test.rb

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

notification_test.rb

Fix notification broadcast test for turbo-rails 2.0.21

2026-01-19 19:49:35 +01:00

qr_code_link_test.rb

Add session transfer feature

2024-12-18 12:38:53 -06:00

reaction_test.rb

Reactions reset entropy

2025-06-05 16:07:19 +02:00

search_test.rb

prefactor: update search to use published cards

2026-01-23 11:07:43 -05:00

signup_test.rb

Limit length of full name during signup

2025-12-15 09:56:35 +00:00

ssrf_protection_test.rb

Block IPv4-compatible IPv6 addresses in SSRF protection (#2273)

2025-12-29 21:45:06 -08:00

tag_test.rb

Introduce a recurring job to delete unused tags

2025-05-14 12:35:52 -04:00

time_window_parser_test.rb

Add support for filtering by creation or completion windows of times

2025-06-27 13:38:22 +02:00

user_test.rb

Validate User name presence and handle blank names gracefully

2025-12-16 10:44:10 -05:00

webhook_test.rb

Introduce gitleaks to the codebase

2025-11-26 15:46:47 -05:00