Dan Brown cf648906e9 SSR: Hardened URL validator against a range of workarounds ...

Added a more comprehensive range of tests to cover.
Thanks to naruhodoowl (https://github.com/kilhsrito-crypto) for
reporting.

2026-04-30 10:18:50 +01:00

..

Activity

Deps: Updated PHP package versions

2025-12-19 14:22:27 +00:00

Api

Responses: Added extra sanitization for download names

2026-03-16 18:28:44 +00:00

Auth

Updated registration to use validated input instead of all

2026-03-19 21:29:30 +00:00

Commands

Modules: Improved install command based on testing

2026-03-06 09:28:46 +00:00

Entity

Merge pull request #6057 from BookStackApp/v25-12

2026-03-15 12:51:02 +00:00

Exports

Responses: Added extra sanitization for download names

2026-03-16 18:28:44 +00:00

Helpers

Books: On delete, redirect to shelf if in context

2026-02-20 11:23:26 +00:00

Meta

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

Permissions

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

References

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

Search

Search: Fixed exact saerch term negation causing no results

2026-04-29 18:07:32 +01:00

Settings

Deps: Updated PHP package versions

2025-12-19 14:22:27 +00:00

Sorting

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

test-data

OIDC: Added testing coverage for picture fetching

2025-05-24 14:36:36 +01:00

Theme

Theme Modules: Added easier way to insert HTML head content

2026-03-08 10:26:00 +00:00

Unit

SSR: Hardened URL validator against a range of workarounds

2026-04-30 10:18:50 +01:00

Uploads

Attachments: Added page access check to attachment delete

2026-04-29 18:31:11 +01:00

User

Preferences: Updated return redirect with better origin checks

2026-03-10 18:31:51 +00:00

Util

SSR: Hardened URL validator against a range of workarounds

2026-04-30 10:18:50 +01:00

CreatesApplication.php

Framework: Upgrade from Laravel 9 to 10

2024-03-16 15:12:14 +00:00

DebugViewTest.php

Tests: Fixed debug test to work with social class changes

2023-12-06 16:57:15 +00:00

ErrorTest.php

404: Fixed entity list issue with entity with non-visible parent

2024-02-28 13:08:06 +00:00

FavouriteTest.php

URL Handling: Removed referrer-based redirect handling

2023-12-10 12:37:21 +00:00

HomepageTest.php

Homepage: Added tags button to non-default home views

2023-09-24 09:31:44 +01:00

LanguageTest.php

Search Index: Fixed SQL error when indexing large pages

2024-12-11 15:55:19 +00:00

PublicActionTest.php

DB: Aligned entity structure to a common table

2025-10-18 13:14:30 +01:00

SecurityHeaderTest.php

Content: Updated tests and CSP usage of content script setting

2026-02-15 18:44:14 +00:00

SessionTest.php

Sessions: Ignored extra meta/dist content in history tracking

2025-12-03 14:10:09 +00:00

StatusTest.php

Added testing for webhook management interface

2021-12-10 14:54:58 +00:00

TestCase.php

Theme System: Split & organised tests, changed module version to string

2026-02-01 16:27:52 +00:00

UrlTest.php

Mail: Removed custom symfony/mailer fork

2025-07-15 15:24:31 +01:00