Mike Dalessio 1ad52d2590 Only send notification emails to verified users ...

Adds verified? check to bundling_emails? to prevent notification emails
from being sent to users who have never authenticated. This closes the
spam vector where bad actors could create users for known email
addresses and trigger unwanted notifications by mentioning them.

Co-Authored-By: Claude <noreply@anthropic.com>

2025-12-05 21:51:44 -05:00

..

accessor_test.rb

Fix tests after the removal of memberships

2025-11-17 09:12:40 -05:00

avatar_test.rb

Don't allow SVG avatar uploads in the first place

2025-12-04 14:27:28 +00:00

configurable_test.rb

Fix tests after the removal of memberships

2025-11-17 09:12:40 -05:00

email_address_changeable_test.rb

Render friendly error message when using an invalid token

2025-12-03 15:37:27 +01:00

mentionable_test.rb

Fix: dismiss mention notifications in cards and comments when reading a card

2025-04-24 12:19:20 +02:00

named_test.rb

Add plain text mentions

2025-04-22 11:26:56 +02:00

notifiable_test.rb

Add missing test (we were only testing this logic via the bundle test)

2025-09-16 11:22:14 +02:00

role_test.rb

Introduce an "owner" role, and prevent it from being administered

2025-11-29 14:13:29 -05:00

searcher_test.rb

Fix skipped tests

2025-11-17 09:12:41 -05:00

settings_test.rb

Only send notification emails to verified users

2025-12-05 21:51:44 -05:00