Pranav 2adc040a8f fix: Validate blob before attaching it to a record (#13115) ...

Previously, attachments relied only on blob_id, which made it possible
to attach blobs across accounts by enumerating IDs. We now require both
blob_id and blob_key, add cross-account validation to prevent blob
reuse, and centralize the logic in a shared BlobOwnershipValidation
concern.

It also fixes a frontend bug where mixed-type action params (number +
string) were incorrectly dropped, causing attachment uploads to fail.

2025-12-19 19:02:21 -08:00

..

accounts

fix: Validate blob before attaching it to a record (#13115)

2025-12-19 19:02:21 -08:00

widget

fix: Show campaigns only if the feature is enabled (#11420)

2025-05-05 19:41:28 -07:00

accounts_controller_spec.rb

feat: allow auto resolve waiting option (#11436)

2025-05-08 12:52:17 +05:30

notification_subscriptions_controller_spec.rb

chore: Enable the new Rubocop rules (#7122)

2023-05-19 14:37:10 +05:30

profiles_controller_spec.rb

fix: Prevent display_name reset when updating password (#10374)

2025-06-11 19:05:30 -04:00

upload_controller_spec.rb

fix: Validate blob before attaching it to a record (#13115)

2025-12-19 19:02:21 -08:00