Overview - Ghost

7 days30 days

Latest CI Pipeline Executions

Fuzzy

Succeeded
30376
77bec40a 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
726c014f 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
726c014f 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Failed
30376
98296d07 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
0eed687b 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
3d646c35 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
8bde4187 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The auto-run effect also stops a stale in-flight request from writing after the logged-in member changes, so the rejection can't be bypassed by a race. The logged-out flow and the member's own link are unchanged.
by Sag
Succeeded
30376
aeb7564e 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Failed
30376
28716a49 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open of someone else's link was enough. A mismatched session almost always signals a mistake, so the page now rejects it outright: an error explains the link belongs to a different email address, nobody's preferences are touched, and the link member's data is never fetched, so nothing about the other subscriber is exposed to the session. The logged-out flow and the member's own link are unchanged.
by Sag
Failed
30376
31fb9acc 🐛 Fixed unsubscribe links affecting the wrong member when logged in
by Sag
Succeeded
30376
9017bca9 Cleaned up the unsubscribe page mismatch guard no ref The mismatched-session case is fully handled by the early error return, so the write helpers don't need their own guard — they can keep branching on loggedInMember as before, and the explanatory comment is redundant next to a self-describing guard clause.
by Sag
Failed
30376
9017bca9 Cleaned up the unsubscribe page mismatch guard no ref The mismatched-session case is fully handled by the early error return, so the write helpers don't need their own guard — they can keep branching on loggedInMember as before, and the explanatory comment is redundant next to a self-describing guard clause.
by Sag
Failed
30376
f0065c16 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open was enough. The session path is now used only when the logged-in member is the link's member, which keeps the member context in sync for the common case; any other link falls back to the uuid+key-scoped endpoint so the change always lands on the member the link was issued to.
by Sag
Succeeded
30376
f0065c16 🐛 Fixed unsubscribe links affecting the wrong member when logged in no ref An email unsubscribe link carries a uuid and key identifying whose subscription it manages, but Portal's unsubscribe page routed the actual update through the browser's member session whenever one existed. If the link belonged to a different member — a forwarded email, a shared device, or staff opening a reader's link — the logged-in member was silently unsubscribed instead of the link's owner, and their newsletter selection was overwritten with the other member's list. The flow auto-executes on page load, so a single open was enough. The session path is now used only when the logged-in member is the link's member, which keeps the member context in sync for the common case; any other link falls back to the uuid+key-scoped endpoint so the change always lands on the member the link was issued to.
by Sag