1. 19 Dec, 2017 1 commit
    • Robert Speicher's avatar
      Only include the user's ID in the time_spent command's update hash · 3e4b45fc
      Robert Speicher authored
      Previously, this would include the entire User record in the update
      hash, which was rendered in the response using `to_json`, erroneously
      exposing every attribute of that record, including their (now removed)
      private token.
      
      Now we only include the user ID, and perform the lookup on-demand.
      3e4b45fc
  2. 13 Nov, 2017 1 commit
  3. 11 Nov, 2017 1 commit
  4. 02 Aug, 2017 1 commit
  5. 27 Jul, 2017 1 commit
  6. 07 Jul, 2017 1 commit
  7. 06 Jul, 2017 1 commit
  8. 05 Jul, 2017 1 commit
  9. 29 Jun, 2017 1 commit
  10. 20 Jun, 2017 1 commit
  11. 21 Apr, 2017 1 commit
  12. 24 Feb, 2017 1 commit
  13. 23 Nov, 2016 1 commit
  14. 19 Sep, 2016 1 commit
  15. 09 Aug, 2016 1 commit
  16. 29 Apr, 2016 1 commit