11 Commits (9c464f54abd9ceda0770400a815d28fef8922133)

Author	SHA1	Message	Date
Wabo	977a98a5da	Sync to upstream 3.0.2 — integrate 28 upstream commits with WaboSign rebrand	3 weeks ago
Wabo	62bf89c1cd	Fix CI failures blocking 1.3.2 release ... - Rubocop Style/RedundantRegexpEscape: remove unnecessary \- in two character classes in FULL_EMAIL_REGEXP (user.rb:59) - Brakeman LinkToHref XSS: add fingerprint to brakeman.ignore — the filter_path guard (start_with?('/')) prevents javascript: and absolute-URL attacks; Brakeman still tracks params[:path] taint through the conditional assignment - RSpec install: switch pdfium binary source from the deleted docusealco/pdfium-binaries to bblanchon/pdfium-binaries (same tarball layout: lib/libpdfium.so) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	1 month ago
Wabo	8dbf5b6cab	Fix CI lint + flaky dashboard test on first fork-Actions run ... Previously CI had never run on the wabolabs/wabosign fork (Actions gated until owner consent). Now that the gate is lifted, run rubocop / erblint / brakeman / rspec against current master uncovered backlog: - rubocop: 97 auto-corrected across the WaboSign-fork files (account logo, SMS, SSO, ability specs, role auth specs, omniauth callbacks). Remaining 8 fixed by hand: * lib/wabosign.rb chained map collapsed to filter_map; `hd` param renamed to `hosted_domain` (Naming/MethodParameterName) * app/models/user.rb default_sso_account split for line length + SafeNavigation * spec/rails_helper.rb abort calls marked `# rubocop:disable Rails/Exit` (upstream pattern, intentional) * spec/requests/users/omniauth_callbacks_spec.rb let! used for side-effect-only setup -> moved into before blocks - erblint: 21 auto-corrected (mostly Style/StringLiterals from a sed substitution that picked double quotes) + a missing autocomplete attribute added to the SMS test-message input. - brakeman: clean. Removed one obsolete ignore entry (was for the deleted enquiries controller) and added one new ignore for the MCP-settings token preview (HighlightCode returns escaped HTML). - rspec: dashboard "shows the list of templates" was flaky because other_template's Faker::Book.title could randomly collide with one of the 5 in-account templates. Pin the name to a unique suffix. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Pete Matsyburka	b3bb29f383	fix brakeman	4 months ago
Alex Turchyn	d7c7efc203	update brakeman ignore rules	6 months ago
Alex Turchyn	988a5361a6	add webhook events	12 months ago
Pete Matsyburka	8fd9af3a6a	fix ci	12 months ago
Pete Matsyburka	f6358c9d47	fix brakeman	1 year ago
Pete Matsyburka	c0594a8b74	fix brakeman	1 year ago
Pete Matsyburka	0a2a1de6b9	brakeman ignore	1 year ago
Alex Turchyn	b65bca213f	add brakeman to CI	1 year ago