Dan Brown 2d6e60a9b3 Merge branch 'sec_aug26' into development

2026-08-24 13:25:55 +01:00

..

Activity

Comments: Added visibility check to comment delete

2026-07-01 10:20:32 +01:00

Api

ZIP Imports: Prevented non-image creation via book cover

2026-08-22 18:46:31 +01:00

Auth

External Auth: Updated user external auth id matching to be stricter

2026-07-27 21:23:47 +01:00

Commands

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

Entity

Merge branch 'sec_aug26' into development

2026-08-24 13:25:55 +01:00

Exports

ZIP Imports: Prevented non-image creation via book cover

2026-08-22 18:46:31 +01:00

Helpers

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

Meta

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

Permissions

Recycle Bin: Ensure permissions are updated for deleted items

2026-08-23 14:24:34 +01:00

References

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

Search

Search: Added draft filtering to generic entity list query

2026-08-21 12:07:25 +01:00

Settings

Recycle Bin: Ensure permissions are updated for deleted items

2026-08-23 14:24:34 +01:00

Sorting

Sort Rules: Added creation hints to sort rule selection

2026-04-12 14:31:40 +01:00

test-data

Exports: Added testing coverage for DOMPDF font usage

2026-04-22 13:12:34 +01:00

Theme

Theme Modules: Added easier way to insert HTML head content

2026-03-08 10:26:00 +00:00

Unit

SSR: Hardened URL validator against a range of workarounds

2026-04-30 10:18:50 +01:00

Uploads

Drawings: Validated drawing upload content as image data

2026-08-19 16:53:47 +01:00

User

User MFA: Reviewed addition of reset, added tests

2026-05-17 13:05:50 +01:00

Util

Page filtering: Fixed allow list stripping sftp and fragment links

2026-08-24 00:03:06 +01:00

CreatesApplication.php

Framework: Upgrade from Laravel 9 to 10

2024-03-16 15:12:14 +00:00

DebugViewTest.php

Meta: Updated security info and fixed some tests/links

2026-04-30 00:32:27 +01:00

ErrorTest.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

FavouriteTest.php

URL Handling: Removed referrer-based redirect handling

2023-12-10 12:37:21 +00:00

HomepageTest.php

Homepage: Added tags button to non-default home views

2023-09-24 09:31:44 +01:00

LanguageTest.php

Search Index: Fixed SQL error when indexing large pages

2024-12-11 15:55:19 +00:00

PublicActionTest.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

SecurityHeaderTest.php

CSP: Renamed CSS CSP option

2026-05-26 12:50:19 +01:00

SessionTest.php

Sessions: Ignored extra meta/dist content in history tracking

2025-12-03 14:10:09 +00:00

StatusTest.php

Added testing for webhook management interface

2021-12-10 14:54:58 +00:00

TestCase.php

Theme System: Split & organised tests, changed module version to string

2026-02-01 16:27:52 +00:00

UrlTest.php

Mail: Removed custom symfony/mailer fork

2025-07-15 15:24:31 +01:00