9 Commits

Author	SHA1	Message	Date
Earlopain	fc7d84affd	[RuboCop] Enable Style/FrozenStringLiteralComment ... This reduces allocations on the posts page by about 5%, from basic testing	2024-02-25 18:15:55 +01:00
Albert Yi	d047d04de6	switch from secret_token to secret_key_base	2018-05-15 15:34:53 -07:00
r888888888	2aa7a8aa9c	fix for statechecker	2017-01-24 14:32:06 -08:00
evazion	1aa2316a9e	dotenv: enable overriding rails secret token / session key.	2017-01-23 18:07:51 -06:00
r888888888	fad0ab7c93	fixes #2133	2014-04-16 17:43:34 -07:00
albert	f52181db94	Major revamp of security. Passwords are first SHA1 hashed and then ... that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced.	2013-03-04 22:55:41 -05:00
albert	493990dae1	chaneg secret token defualt	2013-01-14 15:12:55 -05:00
albert	82bca2419d	add alt source for secret token	2013-01-14 15:11:53 -05:00
albert	694b6f0813	sync	2010-08-18 18:44:18 -04:00