65 Commits (a153e926f899a066408c19068d24bfc8cf74cb1d)

Author	SHA1	Message	Date
Wabo	977a98a5da	Sync to upstream 3.0.2 — integrate 28 upstream commits with WaboSign rebrand	3 weeks ago
Wabo	5433aa4dc3	1.3.1 — address CodeQL alerts from initial scan ... Patch release covering the security findings from the repo's first CodeQL scan against 1.3.0: - Sanitise params[:path] before it flows into form action / link href in submissions_filters/_filter_modal (reflected XSS). - Slice required_params to email/phone before passing to find_by! / find_or_initialize_by in start_form_controller (column-name injection via template-owner-controlled link_form_fields preference). - Rewrite FULL_EMAIL_REGEXP local-part to remove the nested quantifier (ReDoS). - Replace the Bearer-token regex in mcp_controller with a string prefix check (polynomial ReDoS). - Swap Math.random()-based attachment UUIDs for crypto.randomUUID() in the submission-form Vue dropzone / signature / initials steps. - Add a workflow-level permissions: read-all block to ci.yml. See CHANGELOG.md [1.3.1] for the full per-alert breakdown and the list of CodeQL findings that are false positives in context. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Wabo	bb70a9b407	Remove dangling :maybe_redirect_com callbacks (fixes 500s) ... The rebrand commit (2796ddf4) deleted the `maybe_redirect_com` helper from ApplicationController — it was a DocuSeal-specific `.co → .com` 301 redirect with no role in WaboSign — but missed four `prepend_before_action :maybe_redirect_com` / `before_action` callsites that referenced it. Rails resolves before_action symbols at request time via `send`, so every gated action raised NoMethodError → HTTP 500. Affected URLs (now fixed): - GET /settings/esign (admin) - GET /submissions/:id (admin) - GET /start_form/:slug + /completed (public — signers) - GET /submissions/preview/:slug + /completed (public) No replacement needed — the original redirect was DocuSeal-specific. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Pete Matsyburka	37196ff89f	add dynamic documents	4 months ago
Alex Turchyn	6e43a42274	add email 2FA	6 months ago
Pete Matsyburka	453ebbf90a	adjust start form	7 months ago
Pete Matsyburka	fcdc44ddbe	update rails	10 months ago
Alex Turchyn	a61c3e798d	shared link 2fa	11 months ago
Pete Matsyburka	0ff87383d0	fix selfsign	12 months ago
Alex Turchyn	988a5361a6	add webhook events	12 months ago
Pete Matsyburka	74411d883a	adjust link default parties	12 months ago
Alex Turchyn	18ee2d5316	add shared link form fields preferences	12 months ago
Pete Matsyburka	33811945be	fulltext search	1 year ago
Pete Matsyburka	f03166b4ea	one-off submission	1 year ago
Pete Matsyburka	a7bb96464c	completed action shared link	1 year ago
Pete Matsyburka	4e94664008	refactor start form	1 year ago
Pete Matsyburka	24d713dec6	resubmit shared template	1 year ago
Pete Matsyburka	f464e1c46a	add log	1 year ago
Pete Matsyburka	85d52d1f28	refactor policy	1 year ago
Alex Turchyn	e77b5fa2c9	add optional shared link to templates	1 year ago
Alex Turchyn	c91b4a765b	add Privacy Policy and eSignature Disclosure links	1 year ago
Pete Matsyburka	93ba17f42e	expire at webhook	1 year ago
Pete Matsyburka	050224a10d	fix refactor expire at	1 year ago
Pete Matsyburka	5663e60f92	fix log	1 year ago
Pete Matsyburka	b40c27cdbf	fix specs	1 year ago
Pete Matsyburka	af1e8fa6f2	adjust i18n	1 year ago
Alex Turchyn	3ae98bf03e	improve multiple submitters error message	1 year ago
Pete Matsyburka	2c155f0e42	use ip to reopen	1 year ago
Pete Matsyburka	80b06550c2	adjust template link	1 year ago
Pete Matsyburka	2542f26d96	adjust webhooks	2 years ago
Alex Turchyn	84edb6dbda	use webhook urls instead of encrypted configs	2 years ago
Pete Matsyburka	f669045362	redirect com	2 years ago
Oleksandr Turchyn	e9d728fa4a	add i18n	2 years ago
Pete Matsyburka	10fbdf6612	allow to invite party	2 years ago
Pete Matsyburka	4ab1065773	adjust default recipients	2 years ago
Pete Matsyburka	be4a0505bc	assign default submitters	2 years ago
Pete Matsyburka	26113ac3a6	allow signing link with multiple signers	2 years ago
Pete Matsyburka	2764a18252	decline submission	2 years ago
Pete Matsyburka	d63f62109b	add submitter account_id	2 years ago
Pete Matsyburka	3a2910f717	add expire at	2 years ago
Pete Matsyburka	3034c00bb3	use sidekiq	2 years ago
Pete Matsyburka	acf06084bf	simplify job params	2 years ago
Pete Matsyburka	f0d5fc4e2d	add submission created webhook event	2 years ago
Pete Matsyburka	0910c8e100	redirect on archived template	2 years ago
Pete Matsyburka	8630c68631	add account_id to submissions	2 years ago
Pete Matsyburka	07f0fbb50f	add submitter metadata	2 years ago
Pete Matsyburka	9356247ef0	add signer user forms translations	2 years ago
Pete Matsyburka	6d7d8ae87c	rename deleted_at to archived_at	3 years ago
Pete Matsyburka	b94dbc75b7	preserve default values on resubmit	3 years ago
Pete Matsyburka	3b03e61ae3	use template links with 2+ submitters	3 years ago