An error occurred fetching the project authors.
  1. 12 Dec, 2019 1 commit
  2. 02 Dec, 2019 1 commit
  3. 21 Nov, 2019 1 commit
  4. 19 Nov, 2019 1 commit
  5. 08 Nov, 2019 2 commits
  6. 07 Nov, 2019 1 commit
  7. 09 Oct, 2019 1 commit
    • Kerri Miller's avatar
      Avoid #authenticate_user! in #route_not_found · 83950327
      Kerri Miller authored
      This method, #route_not_found, is executed as the final fallback for
      unrecognized routes (as the name might imply.) We want to avoid
      `#authenticate_user!` when calling `#route_not_found`;
      `#authenticate_user!` can, depending on the request format, return a 401
      instead of redirecting to a login page. This opens a subtle security
      exploit where anonymous users will receive a 401 response when
      attempting to access a private repo, while a recognized user will
      receive a 404, exposing the existence of the private, hidden repo.
      83950327
  8. 02 Oct, 2019 1 commit
  9. 30 Jul, 2019 1 commit
  10. 06 Feb, 2019 1 commit
  11. 15 Jan, 2019 1 commit
  12. 09 Jan, 2019 1 commit