Dan Brown e210cc32e4 ZIP Imports: Prevented non-image creation via book cover ...

- Updates ZIP imports to validate that actual mime type of book cover
  images to ensure they are a supported image file.
- Updates lower level ImageStorage to validate extensions of images when
  cleaning their name pre-storage.
- Updates ZIP import Image and Book handling so book cover and image
  files have their extension forced from file mime types in the same
  way.

Added testing to cover.

Thanks to the submersion.ai security research team for reporting.

2026-08-22 18:46:31 +01:00

..

ApiAuthTest.php

Page Content: Added form elements to filtering

2026-01-29 14:54:08 +00:00

ApiConfigTest.php

Apply fixes from StyleCI

2021-06-26 15:23:15 +00:00

ApiDocsTest.php

Deps: Updated PHP package versions

2025-12-03 13:55:00 +00:00

ApiErrorTest.php

API: Limited exception details shown

2026-07-28 13:27:42 +01:00

ApiListingTest.php

Apply fixes from StyleCI

2021-06-26 15:23:15 +00:00

AttachmentsApiTest.php

Attachment API: Fixed missing check on attachment page change

2026-08-19 12:17:58 +01:00

BooksApiTest.php

ZIP Imports: Prevented non-image creation via book cover

2026-08-22 18:46:31 +01:00

ChaptersApiTest.php

Page Content: Added form elements to filtering

2026-01-29 14:54:08 +00:00

ContentPermissionsApiTest.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

ExportsApiTest.php

Responses: Added extra sanitization for download names

2026-03-16 18:28:44 +00:00

ImageGalleryApiTest.php

Images: Added content checking and app range support to streaming

2026-08-19 17:52:35 +01:00

ImportsApiTest.php

Deps: Updated PHP composer dependancy versions, fixed test namespaces

2025-07-27 11:24:54 +01:00

PagesApiTest.php

API: Added comment tree to pages-read endpoint

2025-10-24 10:18:52 +01:00

RecycleBinApiTest.php

Page Content: Added form elements to filtering

2026-01-29 14:54:08 +00:00

RolesApiTest.php

Played around with a new app structure

2023-05-17 17:56:55 +01:00

SearchApiTest.php

Maintenance: Updated PHPStan to Level 4 (#6085)

2026-04-08 21:03:20 +01:00

ShelvesApiTest.php

ZIP Imports: Prevented non-image creation via book cover

2026-08-22 18:46:31 +01:00

SystemApiTest.php

Deps: Updated composer/npm packages, fixed test namespace

2025-05-27 15:53:46 +01:00

TagsApiTest.php

Meta: Updated issue template labels, fixed minor issues

2026-05-05 20:35:45 +01:00

TestsApi.php

Played around with a new app structure

2023-05-17 17:56:55 +01:00

UsersApiTest.php

Page Content: Added form elements to filtering

2026-01-29 14:54:08 +00:00