Eugen Rochko daf71573d0 Fix password change/reset not immediately invalidating other sessions (#12928) ... While making browser requests in the other sessions after a password change or reset does not allow you to be logged in and correctly invalidates the session making the request, sessions have API tokens associated with them, which can still be used until that session is invalidated. This is a security issue for accounts that were already compromised some other way because it makes it harder to throw out the hijacker.		2020-01-24 00:20:38 +01:00
..
admin
concerns	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
form
web
account.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
account_alias.rb
account_conversation.rb
account_domain_block.rb
account_filter.rb	Fix search by IP not using alternative browser sessions in admin UI (#12904)	2020-01-20 17:00:41 +01:00
account_identity_proof.rb
account_migration.rb
account_moderation_note.rb
account_pin.rb
account_stat.rb
account_tag_stat.rb
account_warning.rb
account_warning_preset.rb
admin.rb
announcement.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
announcement_filter.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
announcement_mute.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
announcement_reaction.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
application_record.rb
backup.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
block.rb
bookmark.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
context.rb
conversation.rb
conversation_mute.rb
custom_emoji.rb	Add announcements (#12662)	2020-01-23 22:00:13 +01:00
custom_emoji_category.rb
custom_emoji_filter.rb	Various fixes and improvements (#12878)	2020-01-20 15:55:03 +01:00
custom_filter.rb	Add “account timeline” filter category (#12918)	2020-01-23 21:32:00 +01:00
domain_allow.rb
domain_block.rb	Allow blocking TLDs, and fix TLD blocks not being editable (#12805)	2020-01-08 22:42:05 +01:00
email_domain_block.rb
export.rb
favourite.rb
featured_tag.rb
feed.rb
follow.rb
follow_request.rb
home_feed.rb
identity.rb
import.rb
instance.rb
instance_filter.rb	Various fixes and improvements (#12878)	2020-01-20 15:55:03 +01:00
invite.rb
invite_filter.rb	Various fixes and improvements (#12878)	2020-01-20 15:55:03 +01:00
list.rb
list_account.rb
list_feed.rb
marker.rb
media_attachment.rb	Fix media attachments without file being uploadable (#12562)	2020-01-23 21:40:03 +01:00
mention.rb
mute.rb
notification.rb
poll.rb
poll_vote.rb
preview_card.rb
relationship_filter.rb	Fix relationships page not showing results in admin UI (#12934)	2020-01-24 00:20:23 +01:00
relay.rb
remote_follow.rb
report.rb
report_filter.rb	Various fixes and improvements (#12878)	2020-01-20 15:55:03 +01:00
report_note.rb
scheduled_status.rb
search.rb
session_activation.rb
setting.rb
site_upload.rb
status.rb	Refactor StatusThreadingConcern (#9626)	2020-01-11 19:55:33 +09:00
status_pin.rb
status_stat.rb
tag.rb
tag_filter.rb	Various fixes and improvements (#12878)	2020-01-20 15:55:03 +01:00
tombstone.rb
trending_tags.rb
user.rb	Fix password change/reset not immediately invalidating other sessions (#12928)	2020-01-24 00:20:38 +01:00
user_invite_request.rb
web.rb