Dan Brown 2d6e60a9b3 Merge branch 'sec_aug26' into development

2026-08-24 13:25:55 +01:00

..

Access

Maintenance: Fixed test issues from recent changes

2026-07-28 15:19:20 +01:00

Activity

Comments: Added visibility check to comment delete

2026-07-01 10:20:32 +01:00

Api

Maintenance: Updated $request->get instance to use input

2026-04-18 20:43:27 +01:00

App

External Auth: Updated user external auth id matching to be stricter

2026-07-27 21:23:47 +01:00

Config

CSP: Renamed CSS CSP option

2026-05-26 12:50:19 +01:00

Console

Access: Hardened usage of referring URLs via login

2026-07-01 10:45:59 +01:00

Entities

Page Drafts: Applied draft owner check to more endpoints

2026-08-23 18:08:46 +01:00

Exceptions

Drawings: Validated drawing upload content as image data

2026-08-19 16:53:47 +01:00

Exports

ZIP Imports: Prevented non-image creation via book cover

2026-08-22 18:46:31 +01:00

Facades

Played around with a new app structure

2023-05-17 17:56:55 +01:00

Http

API: Added new tags API endpoints

2026-04-12 18:26:00 +01:00

Permissions

Recycle Bin: Ensure permissions are updated for deleted items

2026-08-23 14:24:34 +01:00

References

Copying: Fixed issue with non-page links to page permalinks

2025-11-29 20:35:16 +00:00

Search

Search: Prevented tag search using unusable numbers

2026-06-06 10:37:06 +01:00

Settings

Maintenance: Updated $request->get instance to use input

2026-04-18 20:43:27 +01:00

Sorting

Maintenance: Fixed type and CI issues

2026-06-11 14:24:09 +01:00

Theming

Theme Modules: Prevented zip-slip in new module extraction method

2026-04-11 18:49:34 +01:00

Translation

Languages: Enabled Thai as a language option

2026-05-05 20:44:04 +01:00

Uploads

Page Drafts: Applied draft owner check to more endpoints

2026-08-23 18:08:46 +01:00

Users

External Auth: Updated user external auth id matching to be stricter

2026-07-27 21:23:47 +01:00

Util

Page filtering: Fixed allow list stripping sftp and fragment links

2026-08-24 00:03:06 +01:00