You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mastodon/app/models
Eugen Rochko daf71573d0
Fix password change/reset not immediately invalidating other sessions (#12928)
While making browser requests in the other sessions after a password
change or reset does not allow you to be logged in and correctly
invalidates the session making the request, sessions have API tokens
associated with them, which can still be used until that session
is invalidated.

This is a security issue for accounts that were already compromised
some other way because it makes it harder to throw out the hijacker.
5 years ago
..
admin Remove auto-silence behaviour from spam check (#12117) 6 years ago
concerns Add announcements (#12662) 5 years ago
form Fix custom emoji category creation silently erroring out on duplicate category (#12647) 5 years ago
web Validate Web::PushSubscription (#11971) 6 years ago
account.rb Add announcements (#12662) 5 years ago
account_alias.rb Addition of update activity distribution by alias, minor correction (#11905) 6 years ago
account_conversation.rb Fix crash when conversations have no valid participants (#10078) 6 years ago
account_domain_block.rb Fix crash when saving invalid domain name (#11528) 6 years ago
account_filter.rb Fix search by IP not using alternative browser sessions in admin UI (#12904) 5 years ago
account_identity_proof.rb Fix Keybase verification using wrong domain for remote accounts (#10547) 6 years ago
account_migration.rb Add (back) option to set redirect notice on account without moving followers (#11994) 6 years ago
account_moderation_note.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
account_pin.rb Add API endpoint to list featured accounts (fixes #8315) (#8317) 7 years ago
account_stat.rb Fix account counters being overwritten by parallel writes (#12045) 6 years ago
account_tag_stat.rb Add profile directory (#9427) 6 years ago
account_warning.rb Add moderation warnings (#9519) 6 years ago
account_warning_preset.rb Add moderation warnings (#9519) 6 years ago
admin.rb Add logging of admin actions (#5757) 7 years ago
announcement.rb Add announcements (#12662) 5 years ago
announcement_filter.rb Add announcements (#12662) 5 years ago
announcement_mute.rb Add announcements (#12662) 5 years ago
announcement_reaction.rb Add announcements (#12662) 5 years ago
application_record.rb Fix records not being indexed sometimes (#12024) 6 years ago
backup.rb Add announcements (#12662) 5 years ago
block.rb Store URIs of follows, follow requests and blocks for ActivityPub (#7160) 7 years ago
bookmark.rb Add announcements (#12662) 5 years ago
context.rb Refactor JSON templates to be generated with ActiveModelSerializers instead of Rabl (#4090) 8 years ago
conversation.rb Revert "Remove conversation URI (#11423)" (#11424) 6 years ago
conversation_mute.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
custom_emoji.rb Add announcements (#12662) 5 years ago
custom_emoji_category.rb Add batch actions and categories to admin UI for custom emojis (#11793) 6 years ago
custom_emoji_filter.rb Various fixes and improvements (#12878) 5 years ago
custom_filter.rb Add “account timeline” filter category (#12918) 5 years ago
domain_allow.rb Fix crash when saving invalid domain name (#11528) 6 years ago
domain_block.rb Allow blocking TLDs, and fix TLD blocks not being editable (#12805) 5 years ago
email_domain_block.rb Fix crash when saving invalid domain name (#11528) 6 years ago
export.rb Export and import show_reblogs together with following list (#10495) 6 years ago
favourite.rb Fix records not being indexed sometimes (#12024) 6 years ago
featured_tag.rb Fix featured tags not finding the right tag on save (#11504) 6 years ago
feed.rb Fix non-numbers being passed to Redis and causing an error (#11697) 6 years ago
follow.rb Extract counters from accounts table to account_stats table (#9295) 6 years ago
follow_request.rb Fix MergeWorker being queued for remote users (#10355) 6 years ago
home_feed.rb Fix performance of home feed regeneration (#12084) 6 years ago
identity.rb Change identities id column to a bigint (#9371) 6 years ago
import.rb Add option to overwrite imported data (#9962) 6 years ago
instance.rb Add whitelist mode (#11291) 6 years ago
instance_filter.rb Various fixes and improvements (#12878) 5 years ago
invite.rb Add invite comments (#10465) 6 years ago
invite_filter.rb Various fixes and improvements (#12878) 5 years ago
list.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
list_account.rb Add abilityto add oneself to lists (#12271) 5 years ago
list_feed.rb Lists (#5703) 7 years ago
marker.rb Add timeline read markers API (#11762) 6 years ago
media_attachment.rb Fix media attachments without file being uploadable (#12562) 5 years ago
mention.rb Improve support for aspects/circles (#8950) 7 years ago
mute.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
notification.rb Add follow_request notification type (#12198) 5 years ago
poll.rb Only normalize local polls (#12515) 5 years ago
poll_vote.rb Add optimistic lock to avoid race conditions when handling votes (#10196) 6 years ago
preview_card.rb Fix preview card image not being re-fetched even if link is re-posted (#11981) 6 years ago
relationship_filter.rb Fix relationships page not showing results in admin UI (#12934) 5 years ago
relay.rb Fix relays UI being available in whitelist/secure mode (#11963) 6 years ago
remote_follow.rb Add account migration UI (#11846) 6 years ago
report.rb Change deletes to preserve soft-deleted statuses in unresolved reports (#11805) 6 years ago
report_filter.rb Various fixes and improvements (#12878) 5 years ago
report_note.rb Fix scope latest of ReportNote (#9630) 6 years ago
scheduled_status.rb Fix deleting a scheduled status immediately deleting media attachments (#9728) 6 years ago
search.rb Refactor JSON templates to be generated with ActiveModelSerializers instead of Rabl (#4090) 8 years ago
session_activation.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
setting.rb Remove intermediary arrays when creating hash maps from results (#9291) 6 years ago
site_upload.rb Improvements to image upload validation and creation (#10431) 6 years ago
status.rb Refactor StatusThreadingConcern (#9626) 5 years ago
status_pin.rb Update dependencies for Ruby (2018-04-23) (#7237) 7 years ago
status_stat.rb Reset status cache when status_stat or media_attachment updates (#9119) 6 years ago
tag.rb Fixes featured hashtag setting page erroring out instead of rejecting invalid tags (#12436) 5 years ago
tag_filter.rb Various fixes and improvements (#12878) 5 years ago
tombstone.rb Record deleted(by mod) status to prevent re-appear (#10732) 6 years ago
trending_tags.rb Fix admin setting to auto-approve hashtags not affecting query (#12130) 6 years ago
user.rb Fix password change/reset not immediately invalidating other sessions (#12928) 5 years ago
user_invite_request.rb Add "why do you want to join" field to invite requests (#10524) 6 years ago
web.rb Add extended about page stub 8 years ago