bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fce6345fa6a47d1fb28607db17074e0b6ffdd7ec
fizzy/app/models
T
History
Mike Dalessio 00eee29837 Validate Identity email address 
using the "standard" email regexp URI::MailTo::EMAIL_REGEXP. The form
field will validate this in the browser, but if bots are creating
identities, they can put whatever they want in here. So let's add some
protection against that.

The HtmlHelper regex was renamed here to avoid confusing Brakeman,
which does imprecise constant lookup and was confusing the two
constants, one of which uses `\A` and `\z` and the other does
not (intentionally).

ref: https://app.fizzy.do/5986089/cards/3276
2025-12-04 14:01:15 -05:00
..
account
Update seeder.rb to fix a few minor things in the onboarding content
2025-12-03 12:20:37 -05:00
board
Scope general broadcasts by account
2025-12-02 18:10:49 +01:00
card
Tighten scope on card notification removals
2025-12-03 15:46:43 -08:00
column
Revert "Revert "Color a11y""
2025-11-14 11:24:55 +01:00
comment
Missed a few changes in a rebase somewhere
2025-11-17 09:19:46 -05:00
concerns
Move Eventable concern to app/models/concerns
2025-12-03 16:36:15 +00:00
event
Clarify not now move actions copy
2025-11-24 12:03:34 +01:00
filter
Scope the single-board case to just the creator's boards (#1880)
2025-12-03 15:47:04 -08:00
identity
Fix crash in join code redemption race condition
2025-12-03 13:29:20 +01:00
magic_link
Use cryptographically secure randomness for Magic Link code generation
2025-12-03 20:15:27 +01:00
notification
Handle notifs created before the current bundle starts_at
2025-11-22 22:38:23 -05:00
notifier
Always include assignees when notifying of published cards
2025-11-10 13:08:51 +01:00
push
Scope model methods by account
2025-11-17 09:12:41 -05:00
search
Auto default for UUID primary keys
2025-12-03 14:27:52 +00:00
signup
Bring simple signup flow from the fizzy-saas gem
2025-11-28 15:53:58 +01:00
tag
Move inside concerns or the override won't work
2025-07-03 23:06:37 +02:00
user
Don't allow SVG avatar uploads in the first place
2025-12-04 14:27:28 +00:00
webhook
Security: close narrow window of exposure to DNS rebinding (#1903)
2025-12-03 23:12:17 -08:00
access.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
account.rb
Prefer find_by! over where + first!
2025-12-03 11:20:02 -03:00
application_platform.rb
Design flow for enabling push and the various status that go with it
2025-07-21 18:27:31 -05:00
application_record.rb
Auto default for UUID primary keys
2025-12-03 14:27:52 +00:00
assignment.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
board.rb
Fix tests after the removal of memberships
2025-11-17 09:12:40 -05:00
card.rb
Merge pull request #1768 from basecamp/data-exports
2025-12-02 09:56:40 +00:00
closure.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
color.rb
Keep current logical names for colors
2025-11-14 11:44:04 +01:00
column.rb
Update sign up
2025-11-17 09:12:40 -05:00
comment.rb
Remove a bunch of N+1s
2025-11-27 11:08:45 -05:00
current.rb
Refactor with_account and without_account methods
2025-12-03 12:26:39 +01:00
entropy.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
event.rb
style: rubocop fix
2025-11-27 12:34:31 -05:00
filter.rb
Remove N+1 on the cards board.
2025-11-27 11:30:54 -05:00
identity.rb
Validate Identity email address
2025-12-04 14:01:15 -05:00
magic_link.rb
Make sign up Magic Links work across devices
2025-11-29 12:36:00 +01:00
mention.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
notification_pusher.rb
Missed a few changes in a rebase somewhere
2025-11-17 09:19:46 -05:00
notification.rb
Remove a bunch of N+1s
2025-11-27 11:08:45 -05:00
notifier.rb
Process notification recipients in consistent order
2025-11-20 09:20:48 +00:00
pin.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
push.rb
Whitespace
2025-07-21 20:11:03 -05:00
qr_code_link.rb
Scope jobs and controllers by account
2025-11-17 09:12:41 -05:00
reaction.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
search.rb
Remove wrapper methods and kwargs
2025-11-21 14:53:17 +00:00
session.rb
Remove the untenanted database
2025-11-17 09:11:36 -05:00
signup.rb
Introduce an "owner" role, and prevent it from being administered
2025-11-29 14:13:29 -05:00
ssrf_protection.rb
Security: close narrow window of exposure to DNS rebinding (#1903)
2025-12-03 23:12:17 -08:00
step.rb
Update sign up
2025-11-17 09:12:40 -05:00
tag.rb
Combine uuid-old and uuid branch changes
2025-11-17 09:12:34 -05:00
tagging.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
time_window_parser.rb
Add chip filters for the new time window filters
2025-06-27 13:38:45 +02:00
user.rb
Don't try to resize non-variable avatars
2025-12-04 13:36:21 +00:00
watch.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
webhook.rb
Scope model methods by account
2025-11-17 09:12:41 -05:00