Maurice
658536c217
fix(trips): a member another member removed cannot rejoin through the invite link
...
Removing a member deleted their membership row only, and the invite link
checked nothing but its own token, so whoever kept the link walked straight
back in (GHSA-wr4c-964p-39jg).
trip_member_removals now notes who another member took off a trip. The invite
link refuses them on preview and on accept with a 403 that says so, old link
or regenerated, and the join page shows that instead of the join button.
Adding them back by name, or through a trip-bound invite or a plugin acting
for a member manager, lifts the note. Leaving a trip yourself leaves none, so
the link keeps working for whoever left and for everybody else.
2026-10-24 08:29:51 +02:00
..
2026-10-10 21:23:37 +02:00
2026-10-22 21:30:26 +00:00
2026-10-10 21:23:37 +02:00
2026-10-22 21:30:38 +00:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-24 01:41:36 +00:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-22 21:30:12 +00:00
2026-10-20 21:15:45 +02:00
2026-10-10 21:23:37 +02:00
2026-10-21 16:31:40 +02:00
2026-10-10 21:23:37 +02:00
2026-10-20 15:28:23 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-14 20:21:38 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-22 21:34:15 +00:00
2026-10-21 18:15:24 +02:00
2026-10-21 15:18:01 +02:00
2026-10-21 17:39:33 +02:00
2026-10-21 18:15:24 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-22 21:30:35 +00:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-17 02:07:22 +00:00
2026-10-19 19:02:40 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-14 10:23:22 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-12 12:32:24 +02:00
2026-10-10 21:23:37 +02:00
2026-10-22 22:29:35 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-20 15:23:10 +02:00
2026-10-20 17:00:27 +02:00
2026-10-20 15:23:55 +02:00
2026-10-20 15:14:29 +02:00
2026-10-22 22:29:35 +02:00
2026-10-17 00:29:18 +00:00
2026-10-20 15:35:08 +02:00
2026-10-20 21:43:47 +02:00
2026-10-19 19:02:40 +02:00
2026-10-20 15:35:32 +02:00
2026-10-20 15:14:00 +02:00
2026-10-20 15:26:18 +02:00
2026-10-10 21:23:37 +02:00
2026-10-22 21:34:15 +00:00
2026-10-10 21:23:37 +02:00
2026-10-18 22:04:41 +02:00
2026-10-24 08:29:51 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 20:16:04 +02:00
2026-10-10 21:23:37 +02:00
2026-10-12 17:06:52 +02:00
2026-10-14 13:24:27 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00
2026-10-12 09:55:52 +02:00
2026-10-10 21:23:37 +02:00
2026-10-20 15:35:32 +02:00
2026-10-10 21:23:37 +02:00
2026-10-10 21:23:37 +02:00