feedback_engine 0.1.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: df04e8fe3b41eb7019841bb7badfc9b55702401e84c8a43fd53eb979f130c629
-  data.tar.gz: '00149e51b454535b3d4ffb6441bfc2c20c55475f50d2967b25be7070bed57fd4'
+  metadata.gz: 156ebb1c4481df5db12c92701ca07f5199f033aa967f264aa855caf327f4542a
+  data.tar.gz: f59ef8d27b7539d16f03eaef38abc4d6ce51ee55cdd630a738433ca7f3463ef7
 SHA512:
-  metadata.gz: 3b7eed3a13ee10859d286f34feada2b28490b3a8a658c9ee2ab4fd479c69ab4481333ea16c208494f5ee6cd789656baf18b0612d4656267020849acf37d330b0
-  data.tar.gz: 18291f5570d23ad44ce193ef0170e30da2b5c594b64af9f04a0ffd764bc6c18026fa3db4c4000d58f2007c1621cc2407b6362391d798a437658b93d8749f415e
+  metadata.gz: 827983bd43f6d4b9af39b6d526f2d14755365ce561cfdbb338e240e97a2a54afa2173e0efb645846078d107c7ee234de27356e9814acbdbd891f8d7116e6a30b
+  data.tar.gz: 3f311aeb99159a9d538ddd87e8d346d7b2bd7d10b4521fcec6e864945801eba2ccf9a5e58bf2ebd65034189379647dabf50d60bc5e421924cb2b012468953481

data/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 0.3.0 (2026-07-22)
+
+- Screenshots can now be pasted (Cmd/Ctrl+V) or dragged & dropped anywhere on
+  the feedback form, not just picked via the file dialog. Selected files show
+  as removable chips; non-images are ignored and the configured maximum is
+  enforced at intake.
+- The dialog traps Tab focus while open and is labelled for screen readers
+  (`aria-labelledby`).
+- Dashboard search across message, author, and section (case-insensitive,
+  LIKE-wildcard-safe, works on SQLite/PostgreSQL/MySQL).
+- A raising `on_submit` hook no longer turns a saved submission into a 500 —
+  the error is logged and the widget still gets its 201.
+- Releases are automated via RubyGems trusted publishing: pushing a `v*` tag
+  builds and publishes the gem from CI (one-time setup on rubygems.org
+  required; see `.github/workflows/release.yml`).
+
+## 0.2.0 (2026-07-22)
+
+Security:
+
+- Dashboard screenshots are now streamed through an engine route gated by
+  `config.authorize_admin`, instead of linking public Active Storage blob
+  URLs. Screenshots can contain anything a user's screen showed; they are no
+  longer reachable without passing the dashboard's own authorization,
+  regardless of how the host configures blob access. (Also fixes broken
+  images in apps that lock their blob endpoints down.)
+
+Added:
+
+- Per-IP rate limiting on the submission endpoint via Rails' built-in
+  limiter (Rails 7.2+; no-op on 7.1). Default 10 submissions/minute; tune or
+  disable with `config.rate_limit`. Localized 429 message in all 26 languages.
+- Browser-level test suite for the widget (Capybara + headless Chrome):
+  open/submit/validation/screenshot-attach/Escape/custom-trigger flows.
+- CI now tests the full Rails support matrix: 7.1, 7.2, 8.0, and 8.1 across
+  Ruby 3.2–3.4.
+
 ## 0.1.0 (2026-07-21)
 
 Initial release.

data/README.md

@@ -20,7 +20,8 @@ app.
 - **Trigger it your way.** Use the built-in floating button, or hide it and
   open the form from any element with a `data-feedback-engine-open` attribute.
 - **Screenshots included.** Users can attach up to 3 images (via Active
-  Storage) — limits are configurable and enforced server-side.
+  Storage) — picked, pasted (Cmd/Ctrl+V), or dragged onto the form. Limits are
+  configurable and enforced server-side.
 - **Pluggable gating and attribution.** You decide who can send feedback, who
   can read it, and how a submission is attributed to a user.
 - **Localized.** The widget follows your app's `I18n.locale`; translations ship
@@ -39,7 +40,8 @@ app.
    and (if you configure it) the current user — stored in the
    `feedback_engine_feedbacks` table.
 4. You browse and triage submissions at the mount path (`/feedback`): status
-   tabs (open → in review → resolved), type filter, screenshots inline.
+   tabs (open → in review → resolved), type filter, search, screenshots
+   inline.
 
 ## Requirements
 
@@ -117,6 +119,10 @@ FeedbackEngine.configure do |config|
   config.max_screenshots = 3
   config.max_screenshot_size = 5.megabytes
 
+  # Per-IP throttle for the submission endpoint (Rails 7.2+; ignored on 7.1).
+  # Keyword arguments for Rails' rate limiter; nil disables throttling.
+  config.rate_limit = { to: 10, within: 1.minute }
+
   # Show the floating feedback button. Set false and trigger the form from
   # your own UI instead (see below).
   config.show_button = true
@@ -171,9 +177,11 @@ end
 ### Screenshots
 
 Uploads use Active Storage: `bin/rails active_storage:install` if you haven't
-already. Limits (`max_screenshots`, `max_screenshot_size`) are enforced
-server-side and shown as a hint in the widget. If Active Storage isn't loaded,
-the upload control simply doesn't render and uploads are rejected.
+already. Users can pick files, paste an image from the clipboard, or drag &
+drop onto the form; selected files show as removable chips. Limits
+(`max_screenshots`, `max_screenshot_size`) are enforced server-side and shown
+as a hint in the widget. If Active Storage isn't loaded, the upload control
+simply doesn't render and uploads are rejected.
 
 ### Notifications
 
@@ -234,6 +242,13 @@ Each row stores `kind`, `section`, `message`, `status` (`open`, `in_review`,
 - Submission and dashboard access are both gated **on the server** for every
   request; the dashboard denies everything outside development until you
   configure `authorize_admin`.
+- Screenshots are **streamed through the dashboard's own gate**, never linked
+  as public Active Storage blob URLs — a screenshot can contain anything a
+  user's screen showed, so it is only reachable by someone who passes
+  `authorize_admin`, regardless of how your app configures blob access.
+- The submission endpoint is **rate-limited per IP** (10/minute by default,
+  via Rails' built-in limiter on Rails 7.2+), so one user or bot can't flood
+  your database with megabytes of uploads.
 - Screenshot count, size, and content type (images only) are validated
   server-side, regardless of what the client claims.
 - The widget code carries the request's Content-Security-Policy nonce (the
@@ -254,11 +269,14 @@ document-level listeners once and re-renders on `turbo:load`.
 
 ```bash
 bin/setup        # or: bundle install
-bundle exec rspec
+bundle exec rspec        # includes browser tests (headless Chrome)
 bundle exec rubocop
 ```
 
-Tests run against a dummy Rails app under `spec/dummy`.
+Tests run against a dummy Rails app under `spec/dummy`; the widget itself is
+covered by Capybara system tests in a real browser. CI runs the suite across
+Rails 7.1 / 7.2 / 8.0 / 8.1 and Ruby 3.2–3.4 (per-version Gemfiles live in
+`gemfiles/`).
 
 ## License
 

data/app/assets/feedback_engine/widget.js

@@ -20,6 +20,8 @@
   var Z = 2147483000;
   var overlay = null;
   var lastFocused = null;
+  var fileInput = null;
+  var fileChips = null;
 
   function ready(fn) {
     if (document.readyState === "loading") {
@@ -101,7 +103,7 @@
     dialog.id = "fbe-dialog";
     dialog.setAttribute("role", "dialog");
     dialog.setAttribute("aria-modal", "true");
-    dialog.setAttribute("aria-label", config.labels.title);
+    dialog.setAttribute("aria-labelledby", "fbe-title");
     if (config.rtl) dialog.setAttribute("dir", "rtl");
 
     dialog.appendChild(header());
@@ -109,6 +111,28 @@
     overlay.appendChild(dialog);
     document.body.appendChild(overlay);
 
+    // Keep Tab (and Shift+Tab) cycling inside the dialog while it is open.
+    overlay.addEventListener("keydown", trapFocus);
+
+    // Screenshots can be pasted (Cmd/Ctrl+V) or dropped anywhere on the form —
+    // the file picker is just one way in.
+    if (config.screenshots.enabled) {
+      dialog.addEventListener("paste", function (event) {
+        var files = event.clipboardData && event.clipboardData.files;
+        if (files && files.length) {
+          event.preventDefault();
+          addFiles(files);
+        }
+      });
+      dialog.addEventListener("dragover", function (event) {
+        event.preventDefault();
+      });
+      dialog.addEventListener("drop", function (event) {
+        event.preventDefault();
+        if (event.dataTransfer) addFiles(event.dataTransfer.files);
+      });
+    }
+
     var first = dialog.querySelector("select, textarea, input");
     if (first) first.focus();
   }
@@ -117,14 +141,32 @@
     if (!overlay) return;
     overlay.remove();
     overlay = null;
+    fileInput = null;
+    fileChips = null;
     if (lastFocused && lastFocused.focus) lastFocused.focus();
   }
 
+  function trapFocus(event) {
+    if (event.key !== "Tab" || !overlay) return;
+    var focusable = overlay.querySelectorAll("button, select, textarea, input, a[href]");
+    if (!focusable.length) return;
+    var first = focusable[0];
+    var last = focusable[focusable.length - 1];
+    if (event.shiftKey && document.activeElement === first) {
+      event.preventDefault();
+      last.focus();
+    } else if (!event.shiftKey && document.activeElement === last) {
+      event.preventDefault();
+      first.focus();
+    }
+  }
+
   function header() {
     var head = document.createElement("div");
     head.className = "fbe-head";
 
     var title = document.createElement("h2");
+    title.id = "fbe-title";
     title.textContent = config.labels.title;
 
     var close = document.createElement("button");
@@ -223,19 +265,69 @@
   }
 
   function screenshotsField() {
-    var input = document.createElement("input");
-    input.type = "file";
-    input.name = "screenshots";
-    input.multiple = true;
-    input.accept = "image/*";
-    var wrap = field(config.labels.screenshots, input);
+    fileInput = document.createElement("input");
+    fileInput.type = "file";
+    fileInput.name = "screenshots";
+    fileInput.multiple = true;
+    fileInput.accept = "image/*";
+    fileInput.addEventListener("change", renderFileChips);
+    var wrap = field(config.labels.screenshots, fileInput);
     var hint = document.createElement("span");
     hint.className = "fbe-hint";
     hint.textContent = config.labels.screenshotsHint;
     wrap.appendChild(hint);
+    fileChips = document.createElement("ul");
+    fileChips.className = "fbe-chips";
+    wrap.appendChild(fileChips);
     return wrap;
   }
 
+  // Merge pasted/dropped images into the file input (the single source of
+  // truth for what gets uploaded), capped at the configured maximum.
+  function addFiles(files) {
+    if (!fileInput) return;
+    var transfer = new DataTransfer();
+    var current = Array.prototype.slice.call(fileInput.files);
+    var incoming = Array.prototype.slice.call(files).filter(function (file) {
+      return /^image\//.test(file.type);
+    });
+    current.concat(incoming).slice(0, config.screenshots.max).forEach(function (file) {
+      transfer.items.add(file);
+    });
+    fileInput.files = transfer.files;
+    renderFileChips();
+  }
+
+  function removeFile(index) {
+    if (!fileInput) return;
+    var transfer = new DataTransfer();
+    Array.prototype.slice.call(fileInput.files).forEach(function (file, i) {
+      if (i !== index) transfer.items.add(file);
+    });
+    fileInput.files = transfer.files;
+    renderFileChips();
+  }
+
+  function renderFileChips() {
+    if (!fileChips) return;
+    fileChips.textContent = "";
+    Array.prototype.slice.call(fileInput.files).forEach(function (file, index) {
+      var chip = document.createElement("li");
+      var name = document.createElement("span");
+      name.textContent = file.name;
+      var remove = document.createElement("button");
+      remove.type = "button";
+      remove.setAttribute("aria-label", config.labels.close + " " + file.name);
+      remove.textContent = "×";
+      remove.addEventListener("click", function () {
+        removeFile(index);
+      });
+      chip.appendChild(name);
+      chip.appendChild(remove);
+      fileChips.appendChild(chip);
+    });
+  }
+
   // --- submit -------------------------------------------------------------------
 
   function submit(form) {
@@ -344,6 +436,12 @@
       "border:1px solid #d1d5db;border-radius:6px;background:none;color:#1c2024;font:inherit;cursor:pointer}",
       "#fbe-dialog textarea{resize:vertical}",
       "#fbe-dialog .fbe-hint{display:block;margin-top:4px;font-size:12px;color:#6b7280;font-weight:400}",
+      "#fbe-dialog .fbe-chips{list-style:none;margin:6px 0 0;padding:0;display:flex;flex-wrap:wrap;gap:6px}",
+      "#fbe-dialog .fbe-chips li{display:flex;align-items:center;gap:4px;max-width:100%;",
+      "padding:2px 4px 2px 10px;border:1px solid #d1d5db;border-radius:999px;font-size:12px;font-weight:400}",
+      "#fbe-dialog .fbe-chips span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;max-width:180px}",
+      "#fbe-dialog .fbe-chips button{border:0;background:none;color:inherit;cursor:pointer;",
+      "font-size:14px;line-height:1;padding:2px 6px}",
       "#fbe-dialog .fbe-error{color:#dc2626;margin:0 0 12px}",
       "#fbe-dialog .fbe-actions{display:flex;justify-content:flex-end;gap:8px}",
       "#fbe-dialog button{padding:8px 14px;border-radius:8px;cursor:pointer;font:inherit}",
@@ -356,6 +454,7 @@
       "#fbe-dialog select,#fbe-dialog textarea,#fbe-dialog input[type=file]{border-color:#2a313a}",
       "#fbe-dialog input[type=file]{color:#9aa2ab}",
       "#fbe-dialog input[type=file]::file-selector-button{border-color:#2a313a;color:#e6e8ea}",
+      "#fbe-dialog .fbe-chips li{border-color:#2a313a}",
       "#fbe-dialog .fbe-secondary{border-color:#2a313a}",
       "#fbe-dialog .fbe-hint{color:#9aa2ab}",
       "}"

data/app/controllers/feedback_engine/feedbacks_controller.rb

@@ -11,13 +11,26 @@ module FeedbackEngine
     before_action :require_admin, except: :create
     before_action :set_feedback, only: %i[show update destroy]
 
+    # Throttle the public endpoint per IP so one user or bot can't flood the
+    # table (each submission may carry megabytes of screenshots). Uses the
+    # rate limiter built into Rails 7.2+ (backed by Rails.cache); on Rails 7.1
+    # this is a no-op. Tune or disable via config.rate_limit — read once at
+    # boot, after the host's initializer.
+    if respond_to?(:rate_limit) && FeedbackEngine.config.rate_limit
+      rate_limit(**FeedbackEngine.config.rate_limit,
+                 only: :create,
+                 with: -> { render json: { errors: [t_error(:error_rate_limited)] }, status: :too_many_requests })
+    end
+
     def index
       @status = Feedback::STATUSES.include?(params[:status]) ? params[:status] : 'open'
       @kind = FeedbackEngine.config.kinds.map(&:to_s).include?(params[:kind]) ? params[:kind] : nil
+      @query = params[:q].to_s.strip.presence
       @counts = Feedback.group(:status).count
 
       scope = Feedback.where(status: @status)
       scope = scope.where(kind: @kind) if @kind
+      scope = search(scope) if @query
       @page = [params[:page].to_i, 1].max
       @feedbacks = scope.newest_first.offset((@page - 1) * PER_PAGE).limit(PER_PAGE + 1).to_a
       @more = @feedbacks.size > PER_PAGE
@@ -35,7 +48,7 @@ module FeedbackEngine
       return render json: { errors: [error] }, status: :unprocessable_entity if error
 
       if feedback.save
-        FeedbackEngine.config.on_submit.call(feedback)
+        notify_host(feedback)
         head :created
       else
         render json: { errors: feedback.errors.full_messages }, status: :unprocessable_entity
@@ -70,6 +83,28 @@ module FeedbackEngine
       @feedback = Feedback.find(params[:id])
     end
 
+    # Case-insensitive match on the free-text columns. LOWER() keeps it
+    # portable across SQLite/PostgreSQL/MySQL, and the explicit ESCAPE makes
+    # the sanitized backslash escapes work on SQLite, which has no default
+    # LIKE escape character.
+    def search(scope)
+      pattern = "%#{Feedback.sanitize_sql_like(@query.downcase)}%"
+      scope.where(
+        "LOWER(message) LIKE :q ESCAPE '\\' OR LOWER(COALESCE(author_label, '')) LIKE :q ESCAPE '\\' " \
+        "OR LOWER(COALESCE(section, '')) LIKE :q ESCAPE '\\'",
+        q: pattern
+      )
+    end
+
+    # The host's hook must never turn a saved submission into a 500 — the
+    # feedback is in the database; notification failures are the host's logs'
+    # problem.
+    def notify_host(feedback)
+      FeedbackEngine.config.on_submit.call(feedback)
+    rescue StandardError => e
+      Rails.logger.error("feedback_engine: on_submit hook raised #{e.class}: #{e.message}")
+    end
+
     def feedback_params
       params.require(:feedback).permit(:kind, :section, :message, :page_url)
     end
@@ -112,7 +147,8 @@ module FeedbackEngine
       defaults = {
         error_save: 'Could not send feedback. Please try again.',
         error_too_many: 'Too many screenshots (max %{count}).',
-        error_too_large: 'A screenshot is too large (max %{size} MB).'
+        error_too_large: 'A screenshot is too large (max %{size} MB).',
+        error_rate_limited: 'Too many submissions. Please wait a moment and try again.'
       }
       I18n.t(key, scope: :feedback_engine, default: defaults[key], **args)
     end

data/app/controllers/feedback_engine/screenshots_controller.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+module FeedbackEngine
+  # Serves screenshots to the dashboard under its own authorization, streaming
+  # the blob instead of linking Active Storage's public blob URLs. Feedback
+  # screenshots can contain anything a user's screen showed, so they must never
+  # be reachable without passing the same gate as the dashboard — regardless of
+  # how the host app configures (or doesn't configure) blob access.
+  class ScreenshotsController < ApplicationController
+    before_action :require_admin
+
+    def show
+      screenshot = Feedback.find(params[:feedback_id]).screenshots.find(params[:id])
+
+      send_data screenshot.download,
+                filename: screenshot.filename.to_s,
+                type: screenshot.content_type,
+                disposition: 'inline'
+    end
+
+    private
+
+    def require_admin
+      head :forbidden unless FeedbackEngine.admin?(request)
+    end
+  end
+end

data/app/views/feedback_engine/feedbacks/index.html.erb

@@ -2,7 +2,7 @@
 
 <div class="tabs">
   <% FeedbackEngine::Feedback::STATUSES.each do |status| %>
-    <%= link_to feedbacks_path(status: status, kind: @kind),
+    <%= link_to feedbacks_path(status: status, kind: @kind, q: @query),
                 class: ('active' if status == @status) do %>
       <%= t("feedback_engine.statuses.#{status}", default: status.humanize) %>
       <span class="count"><%= @counts.fetch(status, 0) %></span>
@@ -20,7 +20,10 @@
       </option>
     <% end %>
   </select>
-  <noscript><button><%= t('feedback_engine.dashboard.filter', default: 'Filter') %></button></noscript>
+  <input type="search" name="q" value="<%= @query %>"
+         placeholder="<%= t('feedback_engine.dashboard.search_placeholder', default: 'Search message, author, section…') %>"
+         aria-label="<%= t('feedback_engine.dashboard.search', default: 'Search') %>">
+  <button><%= t('feedback_engine.dashboard.search', default: 'Search') %></button>
 </form>
 
 <div class="card">
@@ -66,10 +69,10 @@
 <div class="pager">
   <% if @page > 1 %>
     <%= link_to t('feedback_engine.dashboard.newer', default: '← Newer'),
-                feedbacks_path(status: @status, kind: @kind, page: @page - 1) %>
+                feedbacks_path(status: @status, kind: @kind, q: @query, page: @page - 1) %>
   <% end %>
   <% if @more %>
     <%= link_to t('feedback_engine.dashboard.older', default: 'Older →'),
-                feedbacks_path(status: @status, kind: @kind, page: @page + 1) %>
+                feedbacks_path(status: @status, kind: @kind, q: @query, page: @page + 1) %>
   <% end %>
 </div>

data/app/views/feedback_engine/feedbacks/show.html.erb

@@ -18,8 +18,8 @@
   <% if @feedback.screenshots? %>
     <div class="shots">
       <% @feedback.screenshots.each do |screenshot| %>
-        <%= link_to main_app.url_for(screenshot), target: '_blank', rel: 'noopener' do %>
-          <%= image_tag main_app.url_for(screenshot), alt: screenshot.filename %>
+        <%= link_to feedback_screenshot_path(@feedback, screenshot.id), target: '_blank', rel: 'noopener' do %>
+          <%= image_tag feedback_screenshot_path(@feedback, screenshot.id), alt: screenshot.filename %>
         <% end %>
       <% end %>
     </div>

data/config/locales/feedback_engine.ar.yml

@@ -21,3 +21,4 @@ ar:
     error_save: "تعذر إرسال الملاحظات. يرجى المحاولة مرة أخرى."
     error_too_many: "عدد كبير جدًا من لقطات الشاشة (الحد الأقصى %{count})."
     error_too_large: "إحدى لقطات الشاشة كبيرة جدًا (الحد الأقصى %{size} ميغابايت)."
+    error_rate_limited: "عدد كبير جدًا من الإرسالات. يرجى الانتظار قليلًا والمحاولة مرة أخرى."

data/config/locales/feedback_engine.bg.yml

@@ -21,3 +21,4 @@ bg:
     error_save: "Изпращането не бе успешно. Моля, опитайте отново."
     error_too_many: "Твърде много екранни снимки (макс. %{count})."
     error_too_large: "Екранна снимка е твърде голяма (макс. %{size} MB)."
+    error_rate_limited: "Твърде много изпращания. Изчакайте малко и опитайте отново."

data/config/locales/feedback_engine.bn.yml

@@ -21,3 +21,4 @@ bn:
     error_save: "মতামত পাঠানো যায়নি। আবার চেষ্টা করুন।"
     error_too_many: "অতিরিক্ত স্ক্রিনশট (সর্বোচ্চ %{count}টি)।"
     error_too_large: "একটি স্ক্রিনশট খুব বড় (সর্বোচ্চ %{size} MB)।"
+    error_rate_limited: "অনেক বেশি জমা হয়েছে। একটু অপেক্ষা করে আবার চেষ্টা করুন।"

data/config/locales/feedback_engine.de.yml

@@ -21,3 +21,4 @@ de:
     error_save: "Senden fehlgeschlagen. Bitte erneut versuchen."
     error_too_many: "Zu viele Screenshots (max. %{count})."
     error_too_large: "Ein Screenshot ist zu groß (max. %{size} MB)."
+    error_rate_limited: "Zu viele Einsendungen. Bitte warten Sie einen Moment und versuchen Sie es erneut."

data/config/locales/feedback_engine.el.yml

@@ -21,3 +21,4 @@ el:
     error_save: "Η αποστολή απέτυχε. Δοκιμάστε ξανά."
     error_too_many: "Πάρα πολλά στιγμιότυπα οθόνης (έως %{count})."
     error_too_large: "Ένα στιγμιότυπο οθόνης είναι πολύ μεγάλο (έως %{size} MB)."
+    error_rate_limited: "Πάρα πολλές υποβολές. Περιμένετε λίγο και δοκιμάστε ξανά."

data/config/locales/feedback_engine.en.yml

@@ -21,6 +21,7 @@ en:
     error_save: "Could not send feedback. Please try again."
     error_too_many: "Too many screenshots (max %{count})."
     error_too_large: "A screenshot is too large (max %{size} MB)."
+    error_rate_limited: "Too many submissions. Please wait a moment and try again."
     statuses:
       open: "Open"
       in_review: "In review"
@@ -29,6 +30,8 @@ en:
       title: "Feedback"
       all_kinds: "All types"
       filter: "Filter"
+      search: "Search"
+      search_placeholder: "Search message, author, section…"
       from: "From"
       filed: "Filed"
       page: "Page"

data/config/locales/feedback_engine.es.yml

@@ -21,3 +21,4 @@ es:
     error_save: "No se pudo enviar. Inténtalo de nuevo."
     error_too_many: "Demasiadas capturas (máx. %{count})."
     error_too_large: "Una captura es demasiado grande (máx. %{size} MB)."
+    error_rate_limited: "Demasiados envíos. Espera un momento e inténtalo de nuevo."

data/config/locales/feedback_engine.fr.yml

@@ -21,3 +21,4 @@ fr:
     error_save: "Envoi impossible. Veuillez réessayer."
     error_too_many: "Trop de captures d'écran (max %{count})."
     error_too_large: "Une capture est trop volumineuse (max %{size} Mo)."
+    error_rate_limited: "Trop d'envois. Veuillez patienter un instant et réessayer."

data/config/locales/feedback_engine.hi.yml

@@ -21,3 +21,4 @@ hi:
     error_save: "प्रतिक्रिया नहीं भेजी जा सकी। कृपया फिर से प्रयास करें।"
     error_too_many: "बहुत अधिक स्क्रीनशॉट (अधिकतम %{count})।"
     error_too_large: "एक स्क्रीनशॉट बहुत बड़ा है (अधिकतम %{size} MB)।"
+    error_rate_limited: "बहुत अधिक सबमिशन। कृपया थोड़ी देर रुककर फिर से प्रयास करें।"

data/config/locales/feedback_engine.hr.yml

@@ -21,3 +21,4 @@ hr:
     error_save: "Slanje nije uspjelo. Pokušajte ponovno."
     error_too_many: "Previše snimki zaslona (najviše %{count})."
     error_too_large: "Snimka zaslona je prevelika (najviše %{size} MB)."
+    error_rate_limited: "Previše slanja. Pričekajte trenutak i pokušajte ponovno."

data/config/locales/feedback_engine.id.yml

@@ -21,3 +21,4 @@ id:
     error_save: "Masukan gagal terkirim. Silakan coba lagi."
     error_too_many: "Terlalu banyak tangkapan layar (maks. %{count})."
     error_too_large: "Sebuah tangkapan layar terlalu besar (maks. %{size} MB)."
+    error_rate_limited: "Terlalu banyak kiriman. Tunggu sebentar dan coba lagi."

data/config/locales/feedback_engine.it.yml

@@ -21,3 +21,4 @@ it:
     error_save: "Invio non riuscito. Riprova."
     error_too_many: "Troppi screenshot (max %{count})."
     error_too_large: "Uno screenshot è troppo grande (max %{size} MB)."
+    error_rate_limited: "Troppi invii. Attendi un momento e riprova."

data/config/locales/feedback_engine.ja.yml

@@ -21,3 +21,4 @@ ja:
     error_save: "送信できませんでした。もう一度お試しください。"
     error_too_many: "スクリーンショットが多すぎます（最大%{count}枚）。"
     error_too_large: "スクリーンショットが大きすぎます（最大%{size} MB）。"
+    error_rate_limited: "送信回数が多すぎます。しばらく待ってからもう一度お試しください。"

data/config/locales/feedback_engine.ko.yml

@@ -21,3 +21,4 @@ ko:
     error_save: "피드백을 보낼 수 없습니다. 다시 시도해 주세요."
     error_too_many: "스크린샷이 너무 많습니다 (최대 %{count}개)."
     error_too_large: "스크린샷이 너무 큽니다 (최대 %{size} MB)."
+    error_rate_limited: "제출이 너무 많습니다. 잠시 후 다시 시도해 주세요."

data/config/locales/feedback_engine.lb.yml

@@ -21,3 +21,4 @@ lb:
     error_save: "Konnt net geschéckt ginn. Probéiert w.e.g. nach eng Kéier."
     error_too_many: "Ze vill Screenshots (max. %{count})."
     error_too_large: "E Screenshot ass ze grouss (max. %{size} MB)."
+    error_rate_limited: "Ze vill Envoien. Waart w.e.g. e Moment a probéiert nach eng Kéier."

data/config/locales/feedback_engine.nl.yml

@@ -21,3 +21,4 @@ nl:
     error_save: "Versturen mislukt. Probeer het opnieuw."
     error_too_many: "Te veel schermafbeeldingen (max. %{count})."
     error_too_large: "Een schermafbeelding is te groot (max. %{size} MB)."
+    error_rate_limited: "Te veel inzendingen. Wacht even en probeer het opnieuw."

data/config/locales/feedback_engine.pl.yml

@@ -21,3 +21,4 @@ pl:
     error_save: "Nie udało się wysłać opinii. Spróbuj ponownie."
     error_too_many: "Za dużo zrzutów ekranu (maks. %{count})."
     error_too_large: "Zrzut ekranu jest za duży (maks. %{size} MB)."
+    error_rate_limited: "Zbyt wiele zgłoszeń. Odczekaj chwilę i spróbuj ponownie."

data/config/locales/feedback_engine.pt.yml

@@ -21,3 +21,4 @@ pt:
     error_save: "Não foi possível enviar. Tente novamente."
     error_too_many: "Muitas capturas de tela (máx. %{count})."
     error_too_large: "Uma captura é grande demais (máx. %{size} MB)."
+    error_rate_limited: "Envios demais. Aguarde um momento e tente novamente."

data/config/locales/feedback_engine.ro.yml

@@ -21,3 +21,4 @@ ro:
     error_save: "Trimiterea a eșuat. Încearcă din nou."
     error_too_many: "Prea multe capturi de ecran (max. %{count})."
     error_too_large: "O captură de ecran este prea mare (max. %{size} MB)."
+    error_rate_limited: "Prea multe trimiteri. Așteaptă un moment și încearcă din nou."

data/config/locales/feedback_engine.ru.yml

@@ -21,3 +21,4 @@ ru:
     error_save: "Не удалось отправить. Попробуйте ещё раз."
     error_too_many: "Слишком много скриншотов (макс. %{count})."
     error_too_large: "Скриншот слишком большой (макс. %{size} МБ)."
+    error_rate_limited: "Слишком много отправок. Подождите немного и попробуйте ещё раз."

data/config/locales/feedback_engine.th.yml

@@ -21,3 +21,4 @@ th:
     error_save: "ส่งไม่สำเร็จ กรุณาลองอีกครั้ง"
     error_too_many: "ภาพหน้าจอมากเกินไป (สูงสุด %{count})"
     error_too_large: "ภาพหน้าจอมีขนาดใหญ่เกินไป (สูงสุด %{size} MB)"
+    error_rate_limited: "ส่งบ่อยเกินไป กรุณารอสักครู่แล้วลองอีกครั้ง"

data/config/locales/feedback_engine.tr.yml

@@ -21,3 +21,4 @@ tr:
     error_save: "Gönderilemedi. Lütfen tekrar deneyin."
     error_too_many: "Çok fazla ekran görüntüsü (en fazla %{count})."
     error_too_large: "Bir ekran görüntüsü çok büyük (en fazla %{size} MB)."
+    error_rate_limited: "Çok fazla gönderim. Lütfen biraz bekleyip tekrar deneyin."

data/config/locales/feedback_engine.uk.yml

@@ -21,3 +21,4 @@ uk:
     error_save: "Не вдалося надіслати. Спробуйте ще раз."
     error_too_many: "Забагато знімків екрана (макс. %{count})."
     error_too_large: "Знімок екрана завеликий (макс. %{size} МБ)."
+    error_rate_limited: "Забагато надсилань. Зачекайте хвилинку та спробуйте ще раз."

data/config/locales/feedback_engine.ur.yml

@@ -21,3 +21,4 @@ ur:
     error_save: "رائے نہیں بھیجی جا سکی۔ دوبارہ کوشش کریں۔"
     error_too_many: "بہت زیادہ اسکرین شاٹس (زیادہ سے زیادہ %{count})۔"
     error_too_large: "ایک اسکرین شاٹ بہت بڑا ہے (زیادہ سے زیادہ %{size} MB)۔"
+    error_rate_limited: "بہت زیادہ ارسالات۔ براہ کرم تھوڑا انتظار کریں اور دوبارہ کوشش کریں۔"

data/config/locales/feedback_engine.vi.yml

@@ -21,3 +21,4 @@ vi:
     error_save: "Không thể gửi phản hồi. Vui lòng thử lại."
     error_too_many: "Quá nhiều ảnh chụp màn hình (tối đa %{count})."
     error_too_large: "Một ảnh chụp màn hình quá lớn (tối đa %{size} MB)."
+    error_rate_limited: "Gửi quá nhiều lần. Vui lòng đợi một lát rồi thử lại."

data/config/locales/feedback_engine.zh-CN.yml

@@ -21,3 +21,4 @@ zh-CN:
     error_save: "发送失败，请重试。"
     error_too_many: "截图过多（最多 %{count} 张）。"
     error_too_large: "有一张截图过大（最多 %{size} MB）。"
+    error_rate_limited: "提交过于频繁，请稍候再试。"

data/config/routes.rb

@@ -2,7 +2,11 @@
 
 FeedbackEngine::Engine.routes.draw do
   # create is the public widget endpoint; the rest is the triage dashboard.
-  resources :feedbacks, only: %i[create index show update destroy]
+  resources :feedbacks, only: %i[create index show update destroy] do
+    # Screenshots stream through the dashboard's own gate, never via public
+    # Active Storage blob URLs.
+    resources :screenshots, only: :show
+  end
 
   root to: 'feedbacks#index'
 end

data/lib/feedback_engine/configuration.rb

@@ -40,6 +40,11 @@ module FeedbackEngine
     # Upload limits, enforced server-side and mirrored in the widget.
     attr_accessor :max_screenshots, :max_screenshot_size
 
+    # Per-IP throttle for the public submission endpoint, as keyword arguments
+    # for Rails' rate limiter (Rails 7.2+; ignored on 7.1). Read once when the
+    # controller loads — set it in an initializer. nil disables throttling.
+    attr_accessor :rate_limit
+
     # Show the floating feedback button. Set false to trigger the widget from
     # your own UI instead: any element with a `data-feedback-engine-open`
     # attribute opens the form.
@@ -68,6 +73,7 @@ module FeedbackEngine
       @screenshots = true
       @max_screenshots = 3
       @max_screenshot_size = 5 * 1024 * 1024
+      @rate_limit = { to: 10, within: 60 }
       @show_button = true
       @button_label = nil
       @mount_path = '/feedback'

data/lib/feedback_engine/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module FeedbackEngine
-  VERSION = '0.1.0'
+  VERSION = '0.3.0'
 end

data/lib/generators/feedback_engine/install/templates/initializer.rb

@@ -28,6 +28,10 @@ FeedbackEngine.configure do |config|
   # config.max_screenshots = 3
   # config.max_screenshot_size = 5.megabytes
 
+  # Per-IP throttle for the submission endpoint (Rails 7.2+; ignored on 7.1).
+  # Keyword arguments for Rails' rate limiter; nil disables throttling.
+  # config.rate_limit = { to: 10, within: 1.minute }
+
   # Show the floating feedback button. Set false and add
   # `data-feedback-engine-open` to any element to trigger the form yourself.
   # config.show_button = true

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: feedback_engine
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Yaroslav Shmarov
@@ -41,6 +41,7 @@ files:
 - app/assets/feedback_engine/widget.js
 - app/controllers/feedback_engine/application_controller.rb
 - app/controllers/feedback_engine/feedbacks_controller.rb
+- app/controllers/feedback_engine/screenshots_controller.rb
 - app/helpers/feedback_engine/widget_helper.rb
 - app/models/feedback_engine/application_record.rb
 - app/models/feedback_engine/feedback.rb
@@ -103,7 +104,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.6
+rubygems_version: 3.6.9
 specification_version: 4
 summary: 'In-app product feedback collection for Rails: a drop-in widget and a built-in
   triage dashboard.'