BookStackApp/BookStack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2026-10-12 02:01:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
0763d7df304289bca39e0bc18668dc8bca085829
BookStack/app
T
History
Dan Brown 0763d7df30 Social Login: Fixed queries unscoped to driver 
Prevents the same IDs from different systems leading to access of other
accounts, and allows registration of same ids under different services.

Thanks to Google and Ada Logics for discovery and reporting.
2026-09-13 17:27:01 +01:00
..
Access
Social Login: Fixed queries unscoped to driver
2026-09-13 17:27:01 +01:00
Activity
Comments: Added visibility check to comment delete
2026-07-01 10:20:32 +01:00
Api
Maintenance: Updated $request->get instance to use input
2026-04-18 20:43:27 +01:00
App
External Auth: Updated user external auth id matching to be stricter
2026-07-27 21:23:47 +01:00
Config
CSP: Renamed CSS CSP option
2026-05-26 12:50:19 +01:00
Console
Access: Hardened usage of referring URLs via login
2026-07-01 10:45:59 +01:00
Entities
Page Drafts: Applied draft owner check to more endpoints
2026-08-23 18:08:46 +01:00
Exceptions
Drawings: Validated drawing upload content as image data
2026-08-19 16:53:47 +01:00
Exports
ZIP Imports: Prevented non-image creation via book cover
2026-08-22 18:46:31 +01:00
Facades
Played around with a new app structure
2023-05-17 17:56:55 +01:00
Http
API: Added new tags API endpoints
2026-04-12 18:26:00 +01:00
Permissions
Recycle Bin: Ensure permissions are updated for deleted items
2026-08-23 14:24:34 +01:00
References
Copying: Fixed issue with non-page links to page permalinks
2025-11-29 20:35:16 +00:00
Search
Search: Prevented tag search using unusable numbers
2026-06-06 10:37:06 +01:00
Settings
Maintenance: Updated $request->get instance to use input
2026-04-18 20:43:27 +01:00
Sorting
Maintenance: Fixed type and CI issues
2026-06-11 14:24:09 +01:00
Theming
Theme Modules: Prevented zip-slip in new module extraction method
2026-04-11 18:49:34 +01:00
Translation
Languages: Enabled Thai as a language option
2026-05-05 20:44:04 +01:00
Uploads
Page Drafts: Applied draft owner check to more endpoints
2026-08-23 18:08:46 +01:00
Users
External Auth: Updated user external auth id matching to be stricter
2026-07-27 21:23:47 +01:00
Util
Page filtering: Fixed allow list stripping sftp and fragment links
2026-08-24 00:03:06 +01:00