fix(admin): stop a stale CSRF cookie wedging actions (#2258)
fix(admin): stop a stale CSRF cookie wedging actions (#2258)
Inspect stored evidence paths
fluxer_admin/src/middleware/csrf.rsfluxer_admin/tests/csrf_legacy_cookie.rs
Reading the persisted public view.
Datamining / findings
Evidence records derived from public code, builds, assets, APIs or schemas. A detection is not automatically a release, announcement or confirmed feature.
Classification overview
fix(admin): stop a stale CSRF cookie wedging actions (#2258)
fluxer_admin/src/middleware/csrf.rsfluxer_admin/tests/csrf_legacy_cookie.rschore(sdk): regenerate from OpenAPI
lib/export.dartlib/fluxer_client.dartlib/invites/invites_api.dartlib/invites/invites_api.g.dartlib/models/api_error_code.dartlib/models/group_dm_invite_metadata_response.dartlib/models/group_dm_invite_response.dartlib/models/guild_invite_metadata_response.dartlib/models/guild_invite_response.dartlib/models/invite_metadata_response_schema.dartlib/models/invite_metadata_response_schema.g.dartlib/models/invite_response_schema.dartlib/models/invite_response_schema.g.dartlib/models/pack_create_request.dartlib/models/pack_create_request.g.dartlib/models/pack_dashboard_response.dartlib/models/pack_dashboard_response.g.dartlib/models/pack_dashboard_response_emoji.dartlib/models/pack_dashboard_response_emoji.g.dartlib/models/pack_dashboard_response_sticker.dartlib/models/pack_dashboard_response_sticker.g.dartlib/models/pack_invite_create_request.dartlib/models/pack_invite_create_request.g.dartlib/models/pack_invite_metadata_response.dartlib/models/pack_invite_metadata_response.g.dartlib/models/pack_invite_metadata_response_pack.dartlib/models/pack_invite_metadata_response_pack.g.dartlib/models/pack_invite_metadata_response_pack_type_type.dartlib/models/pack_invite_metadata_response_type_type.dartlib/models/pack_invite_response.dartlib/models/pack_invite_response.g.dartlib/models/pack_invite_response_pack.dartlib/models/pack_invite_response_pack.g.dartlib/models/pack_invite_response_pack_type_type.dartlib/models/pack_invite_response_type_type.dartlib/models/pack_summary_response.dartlib/models/pack_summary_response.g.dartlib/models/pack_summary_response_type_type.dartlib/models/pack_update_request.dartlib/models/pack_update_request.g.dartlib/packs/packs_api.dartlib/packs/packs_api.g.dartchore(sdk): regenerate from OpenAPI
lib/channels/channels_api.dartlib/channels/channels_api.g.dartlib/export.dartlib/models/object1.dartlib/models/object1.g.dartlib/models/object2.dartlib/models/object2.g.dartlib/models/object2_attachments.dartlib/models/object2_attachments.g.dartlib/models/object3.dartlib/models/object3.g.dartlib/models/object4.dartlib/models/object4.g.dartlib/models/object5.dartlib/models/object5.g.dartlib/models/scheduled_message_response_schema.dartlib/models/scheduled_message_response_schema.g.dartlib/models/scheduled_message_response_schema_payload.dartlib/models/scheduled_message_response_schema_payload.g.dartlib/models/scheduled_message_response_schema_payload_allowed_mentions.dartlib/models/scheduled_message_response_schema_payload_allowed_mentions.g.dartlib/models/scheduled_message_response_schema_payload_allowed_mentions_parse_parse.dartlib/models/scheduled_message_response_schema_payload_message_reference.dartlib/models/scheduled_message_response_schema_payload_message_reference.g.dartlib/models/scheduled_message_response_schema_status_status.dartlib/users/users_api.dartlib/users/users_api.g.dartlib/webhooks/webhooks_api.dartlib/webhooks/webhooks_api.g.dartfeat(integration_test): add new tests
integration_test/flows/channel_navigation_test.dartintegration_test/message_list_scroll_perf_test.dartintegration_test/perf/dm_list_scroll_test.dartintegration_test/perf/guild_navbar_scroll_test.dartintegration_test/perf/message_list_scroll_test.dartintegration_test/perf/notifications_scroll_test.dartintegration_test/perf/settings_scroll_test.dartintegration_test/smoke/app_startup_test.dartintegration_test/smoke/bottom_nav_test.dartintegration_test/support/app_launcher.dartintegration_test/support/navigation_helpers.dartintegration_test/support/perf_utils.dartintegration_test/support/requirements.dartintegration_test/support/scroll_utils.dartintegration_test/support/test_account.dartintegration_test/support/test_config.dartMerge remote-tracking branch 'origin/canary' into canary
integration_test/flows/channel_navigation_test.dartintegration_test/message_list_scroll_perf_test.dartintegration_test/perf/dm_list_scroll_test.dartintegration_test/perf/guild_navbar_scroll_test.dartintegration_test/perf/message_list_scroll_test.dartintegration_test/perf/notifications_scroll_test.dartintegration_test/perf/settings_scroll_test.dartintegration_test/smoke/app_startup_test.dartintegration_test/smoke/bottom_nav_test.dartintegration_test/support/app_launcher.dartintegration_test/support/navigation_helpers.dartintegration_test/support/perf_utils.dartintegration_test/support/requirements.dartintegration_test/support/scroll_utils.dartintegration_test/support/test_account.dartintegration_test/support/test_config.dartchore(sdk): regenerate from OpenAPI
lib/models/read_state_ack_response.dartlib/models/read_state_ack_response.g.dartfeat(markdown): render messages from the native parser ast
lib/features/chat/presentation/widgets/messages/message_markdown.dartlib/features/settings/presentation/user_settings_modal.dartlib/features/settings/presentation/widgets/user_accessibility_preview.dartlib/features/settings/presentation/widgets/user_feature_flags.dartlib/features/settings/providers/native_markdown_parser_provider.dartlib/main.dartlib/shared/markdown/native_markdown_parser.dartpackages/fluxer_markdown/lib/src/parsing/fluxer_inline_syntaxes.dartpackages/fluxer_markdown/lib/src/parsing/provided_ast_emoji.dartpackages/fluxer_markdown/lib/src/renderers/fluxer_markdown_renderers.dartpackages/fluxer_markdown/lib/src/widgets/fluxer_markdown.dartpackages/fluxer_markdown/test/provided_ast_rendering_test.dartpackages/fluxer_markdown_native/lib/fluxer_markdown_native.dartpackages/fluxer_markdown_native/lib/src/markdown_bridge.dartpackages/fluxer_markdown_native/pubspec.lockpackages/fluxer_markdown_native/pubspec.yamlpackages/fluxer_markdown_native/test/markdown_bridge_test.dartpubspec.lockpubspec.yamlfeat(markdown): bind the canonical rust parser via native assets
.github/workflows/android-canary-fcm.yml.github/workflows/android-canary-oss.yml.github/workflows/dart-analyze.yml.gitmodulesREADME.mdfluxerlib/features/settings/presentation/widgets/native_markdown_tester.dartlib/features/settings/presentation/widgets/user_developer_tools.dartpackages/fluxer_markdown_native/analysis_options.yamlpackages/fluxer_markdown_native/hook/build.dartpackages/fluxer_markdown_native/lib/fluxer_markdown_native.dartpackages/fluxer_markdown_native/lib/src/ast.dartpackages/fluxer_markdown_native/lib/src/bindings.dartpackages/fluxer_markdown_native/lib/src/decode_binary.dartpackages/fluxer_markdown_native/lib/src/flags.dartpackages/fluxer_markdown_native/lib/src/parser.dartpackages/fluxer_markdown_native/pubspec.lockpackages/fluxer_markdown_native/pubspec.yamlpackages/fluxer_markdown_native/test/binary_envelope_test.dartpackages/fluxer_markdown_native/test/parse_smoke_test.dartpackages/fluxer_markdown_native/tool/envelope_bench.dartpubspec.lockpubspec.yamlchore(sdk): regenerate from OpenAPI
lib/channels/channels_api.dartlib/channels/channels_api.g.dartlib/export.dartlib/models/voice_debug_logging_event_schema.dartlib/models/voice_debug_logging_event_schema.g.dartlib/models/voice_debug_logging_events_body_schema.dartlib/models/voice_debug_logging_events_body_schema.g.dartlib/models/voice_debug_logging_events_response.dartlib/models/voice_debug_logging_events_response.g.dartlib/models/voice_debug_logging_status_response.dartlib/models/voice_debug_logging_status_response.g.dartlib/models/voice_debug_logging_toggle_body_schema.dartlib/models/voice_debug_logging_toggle_body_schema.g.dartlib/models/voice_presence_heartbeat_body_schema.dartlib/models/voice_presence_heartbeat_body_schema.g.dartlib/models/voice_presence_heartbeat_end_response.dartlib/models/voice_presence_heartbeat_end_response.g.dartlib/models/voice_presence_heartbeat_response.dartlib/models/voice_presence_heartbeat_response.g.dartfix(push): perform background clears instead of displaying them
lib/core/push/fcm/fcm_entrypoint.fcm.dartlib/core/push/push_notification_clear.dartpackages/fluxer_fcm/lib/fcm_background_handler.dartpackages/fluxer_fcm/lib/fcm_background_handler_policy.dartpackages/fluxer_fcm/lib/fcm_background_local_notifications.dartpackages/fluxer_fcm/lib/fcm_background_notification_clear.dartpackages/fluxer_fcm/lib/fcm_notification_clear_hooks.dartpackages/fluxer_fcm/lib/fcm_notification_clear_targets.dartpackages/fluxer_fcm/test/fcm_background_handler_policy_test.dartpackages/fluxer_fcm/test/fcm_notification_clear_targets_test.dartMerge remote-tracking branch 'origin/canary' into canary
lib/core/push/fcm/fcm_entrypoint.fcm.dartlib/core/push/push_notification_clear.dartpackages/fluxer_fcm/lib/fcm_background_handler.dartpackages/fluxer_fcm/lib/fcm_background_handler_policy.dartpackages/fluxer_fcm/lib/fcm_background_local_notifications.dartpackages/fluxer_fcm/lib/fcm_background_notification_clear.dartpackages/fluxer_fcm/lib/fcm_notification_clear_hooks.dartpackages/fluxer_fcm/lib/fcm_notification_clear_targets.dartpackages/fluxer_fcm/test/fcm_background_handler_policy_test.dartpackages/fluxer_fcm/test/fcm_notification_clear_targets_test.dartfix(push): skip background local notification for clear payloads
lib/core/push/fcm/fcm_entrypoint.fcm.dartMerge remote-tracking branch 'origin/canary' into canary
lib/core/push/fcm/fcm_entrypoint.fcm.dartchore(sdk): regenerate from OpenAPI
lib/models/guild_ban_create_request.dartlib/models/guild_ban_create_request.g.dartMerge branch 'canary' into beta
lib/app.dartlib/core/deep_links/deep_link_handler.dartlib/core/instance/instance_config_snapshot.dartlib/core/instance/instance_constants.dartlib/core/instance/instance_runtime_config.dartlib/core/providers/app_startup_provider.dartlib/core/providers/app_ui_lifecycle_provider.dartlib/core/providers/gateway_reconnect_provider.dartlib/core/providers/instance_runtime_config_provider.dartlib/core/providers/well_known_provider.dartlib/core/router/fluxer_router.dartlib/core/router/guild_root_redirect.dartlib/core/router/route_names.dartlib/core/router/shell_transition_page.dartlib/features/auth/data/auth_repository.dartlib/features/auth/presentation/login_screen.dartlib/features/auth/presentation/widgets/login_form.dartlib/features/auth/presentation/widgets/register_screen.dartlib/features/auth/providers/instance_selector_provider.dartlib/features/auth/providers/login_view_model.dartlib/features/auth/providers/pending_registration_url_code_provider.dartlib/features/chat/data/attachment_gallery_source.dartlib/features/chat/domain/composer_slash_command.dartlib/features/chat/presentation/channel_layout.dartlib/features/chat/presentation/widgets/channel/channel_chat_panel.dartlib/features/chat/presentation/widgets/channel/channel_header.dartlib/features/chat/presentation/widgets/composer/channel_textarea.dartlib/features/chat/presentation/widgets/composer/composer_autocomplete_field.dartlib/features/chat/presentation/widgets/composer/composer_autocomplete_field_state.dartlib/features/chat/presentation/widgets/composer/composer_autocomplete_panel.dartlib/features/chat/presentation/widgets/composer/slash_command_composer.dartlib/features/chat/presentation/widgets/composer/slash_command_param_bar.dartlib/features/chat/presentation/widgets/composer/system_dm_composer_barrier.dartlib/features/chat/presentation/widgets/composer/wide_composer_layout.dartlib/features/chat/presentation/widgets/media/animated_image_playback_controller.dartlib/features/chat/presentation/widgets/media/chat_inline_video_player.dartlib/features/chat/presentation/widgets/media/chat_mobile_fullscreen_video.dartlib/features/chat/presentation/widgets/media/fluxer_animated_image.dartlib/features/chat/presentation/widgets/message_actions/quick_reaction_loader.dartlib/features/chat/presentation/widgets/messages/neko_sprite.dartlib/features/chat/presentation/widgets/pickers/attachment_panel_content.dartlib/features/chat/presentation/widgets/pickers/emoji_picker_content.dartlib/features/chat/presentation/widgets/pickers/favorite_media_picker_content.dartlib/features/chat/presentation/widgets/pickers/gif_picker_content.dartlib/features/chat/presentation/widgets/pickers/inline_expression_panel.dartlib/features/chat/presentation/widgets/pickers/sticker_picker_content.dartlib/features/chat/presentation/widgets/voice/dm_embedded_voice_call_panel.dartlib/features/chat/providers/core/chat_view_model.dartlib/features/chat/providers/pickers/emoji_picker_provider.dartlib/features/chat/providers/upload/cloud_upload_controller.dartfix(settings): hide labs on self host
lib/features/settings/presentation/user_settings_modal.dartlib/features/settings/presentation/user_settings_nav.dartlib/features/settings/utils/open_user_settings_deep_link.darttest/features/settings/user_settings_billing_nav_test.dartMerge remote-tracking branch 'origin/canary' into canary
lib/features/settings/presentation/user_settings_modal.dartlib/features/settings/presentation/user_settings_nav.dartlib/features/settings/utils/open_user_settings_deep_link.darttest/features/settings/user_settings_billing_nav_test.dartperf(voice): call joining speed
lib/app.dartlib/features/ui/voice/voice_channel_participant_grid.dartlib/features/ui/voice/voice_participant_media_tile.dartlib/features/voice/presentation/widgets/pip/voice_pip_layer.dartlib/features/voice/presentation/widgets/pip/voice_pip_video.dartlib/features/voice/providers/voice_channel_participants_provider.dartlib/features/voice/providers/voice_join_eligibility_provider.dartlib/features/voice/providers/voice_session_provider.dartlib/features/voice/services/voice_settings_applicator.dartlib/features/voice/utils/call_actions.dartlib/features/voice/utils/voice_connection_actions.dartlib/features/voice/utils/voice_join_timing.dartlib/features/voice/utils/voice_pip_subscribe.dartlib/features/voice/utils/voice_video_subscription.darttest/features/ui/voice/voice_participant_media_tile_test.darttest/features/voice/utils/voice_join_timing_test.darttest/features/voice/utils/voice_video_subscription_test.dartperf(voice): improve pip layer painting
lib/features/voice/presentation/widgets/pip/voice_pip_layer.dartMerge remote-tracking branch 'origin/canary' into canary
lib/features/voice/presentation/widgets/pip/voice_pip_layer.dart