0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-14 13:58:53 +08:00
discourse/plugins/discourse-subscriptions/app/controllers/discourse_subscriptions
Arpit Jalan d55ea4fd0f
FIX: enforce published product allowlist for subscriptions (#40249)
Previously, subscription detail and checkout paths could accept Stripe
products or prices that were not published in Discourse.

This change checks the local product list before showing products,
creating purchases, or finalizing pending purchases, keeping checkout
behavior consistent with the public catalog.
2026-05-28 22:22:52 +05:30
..
admin DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
user DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
admin_controller.rb DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
hooks_controller.rb FIX: Use signed checkout user references in discourse-subscriptions (#40058) 2026-05-28 22:19:56 +05:30
pricingtable_controller.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
subscribe_controller.rb FIX: enforce published product allowlist for subscriptions (#40249) 2026-05-28 22:22:52 +05:30