discourse/lib/middleware
Krzysztof Kotlarek 2088cff085
FIX: Skip incomplete BrowserPageviewEvent payloads (#40354)
Persisted browser pageview events require a URL, IP address, user agent,
and session ID. Stale deferred pageview requests can omit tracking
metadata and previously caused PostgreSQL not-null violations in the
deferred job.

This change discards incomplete payloads before scheduling the insert
and adds regression coverage for deferred pageviews without URLs.
2026-05-28 14:01:03 +08:00
..
anonymous_cache.rb UX: Drop legacy mobile-mode site settings (#40226) 2026-05-26 09:23:13 +01:00
crawler_hooks.rb FIX: Skip crawler localization for direct upload requests (#39849) 2026-05-08 10:53:35 -03:00
csp_script_nonce_injector.rb DEV: Memoize CSP nonce placeholder on response (#25724) 2024-02-16 12:15:55 +00:00
default_headers.rb DEV: ensure Rails application default headers are present in responses (#31619) 2025-03-05 13:19:09 +08:00
discourse_public_exceptions.rb SECURITY: Error responses missing Cache-Control header 2025-10-28 14:40:41 +08:00
enforce_hostname.rb DEV: Simplify CORS logic for public asset routes (#33106) 2025-06-09 08:58:27 +01:00
missing_avatars.rb DEV: Enable Rails/FilePath rubocop rule (#40097) 2026-05-19 19:07:54 +02:00
omniauth_bypass_middleware.rb FIX: 'destination_url' cookie handling (#33072) 2025-08-06 10:09:01 +02:00
overload_protections.rb FIX: Include API key requests in overload protection bypass (#39702) 2026-05-07 12:59:11 +08:00
processing_request.rb PERF: Reject anonymous requests with 503 upon aggressive queuing (#36519) 2025-12-18 10:23:42 +08:00
request_tracker.rb FIX: Skip incomplete BrowserPageviewEvent payloads (#40354) 2026-05-28 14:01:03 +08:00
track_view_session_id_injector.rb FIX: Anon pageview session id reused across cached responses (#39879) 2026-05-12 10:13:05 +08:00