fix: remove profile subdomain alert side channel

Author: tomaspinkas-com

lib/algora_web/endpoint.ex

@@ -124,7 +124,6 @@ defmodule AlgoraWeb.Endpoint do
         conn.request_path
 
       _user ->
-        Algora.Activities.alert("👀 Someone is viewing https://#{sub}.algora.io", :critical)
         Path.join(["/#{sub}/candidates", conn.request_path])
     end
   end

test/algora_web/controllers/endpoint_subdomain_test.exs

@@ -0,0 +1,17 @@
+defmodule AlgoraWeb.EndpointSubdomainTest do
+  use AlgoraWeb.ConnCase, async: true
+
+  import Algora.Factory
+
+  test "known profile subdomains redirect without creating a critical activity", %{conn: conn} do
+    insert!(:user, handle: "acme")
+
+    conn =
+      conn
+      |> Map.put(:host, "acme.algora.io")
+      |> get("/jobs")
+
+    assert redirected_to(conn, 301) == "http://localhost/acme/candidates/jobs"
+    assert_activity_names([])
+  end
+end