Juan José Mata 73b6077ac3 Constrain Lunchflow base URL to trusted endpoint (#1768) ...

* Constrain Lunchflow base URL to trusted endpoint

Prevent SSRF by ignoring user-provided Lunchflow base_url values unless they match the canonical Lunchflow HTTPS endpoint. Add model tests covering invalid host/scheme and valid canonicalization behavior.

* Linter

2026-05-12 12:18:17 +02:00

..

channels/application_cable

Initial commit

2024-02-02 09:05:04 -06:00

components/previews

refactor(design-system): extend DS::Alert and migrate 9 inline alert blocks (#1731)

2026-05-10 17:14:06 +02:00

controllers

feat(recurring): allow marking transfers as recurring (#895) (#1589)

2026-05-12 00:37:47 +02:00

data_migrations

Additional cache columns on balances for activity view breakdowns (#2505)

2025-07-23 10:06:25 -04:00

fixtures

feat(providers): add Kraken exchange sync (#1759)

2026-05-12 00:22:37 +02:00

helpers

Fix SSO icon rendering for mixed-case provider icons (#1674)

2026-05-05 11:52:40 +02:00

integration

feat(transaction): add support for file attachments using Active Storage (#713)

2026-03-14 23:56:27 +01:00

interfaces

fix: currency being ignored for properties (#1556)

2026-04-29 13:47:32 +02:00

javascript

Adapt holdings to number inputs (#1258)

2026-03-23 18:27:53 +01:00

jobs

[codex] Complete Sophtron account mapping (#1698)

2026-05-08 15:15:23 +02:00

lib

feat: add Hungarian (hu) localization (#1677)

2026-05-06 22:38:51 +02:00

mailers

Add scheduled DemoFamilyRefreshJob to rebuild demo data daily (#1217)

2026-03-17 19:41:26 +01:00

migrations

Add Plaid migration constant alias (#1235)

2026-03-21 01:03:19 +01:00

models

Constrain Lunchflow base URL to trusted endpoint (#1768)

2026-05-12 12:18:17 +02:00

policies

refactor: improve SSO provider management and logging

2026-01-03 21:13:24 -05:00

services

Simplefin enhancements v2 (#267)

2025-11-17 21:51:37 +01:00

support

feat: Add LLM prompt for API endpoint consistency (#949)

2026-02-10 23:36:25 +01:00

system

Bank Sync cleanup (#1710)

2026-05-10 22:13:57 +02:00

vcr_cassettes

More rebranding changes (#159)

2025-09-24 00:19:51 +02:00

views/transactions

Simplefin enhancements v2 (#267)

2025-11-17 21:51:37 +01:00

api_endpoint_consistency_rule_test.rb

feat: Add LLM prompt for API endpoint consistency (#949)

2026-02-10 23:36:25 +01:00

application_system_test_case.rb

Prevent long category labels from overflowing or crowding adjacent controls (#1498)

2026-04-19 18:40:50 +02:00

encryption_verification_test.rb

Initial security fixes (#461)

2026-01-23 22:05:28 +01:00

i18n_test.rb

New Design System + Codebase Refresh (#1823)

2025-02-21 11:57:59 -05:00

test_helper.rb

feat(api): expose budget state (#1640)

2026-05-06 20:50:46 +02:00