starred/BookStack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2026-07-24 21:33:26 +03:00
Code Issues 784 Packages Projects Releases 25 Wiki Activity
Files
0bf6c38e9341aeffa5b3e0c488c013d37ae60867
BookStack/tests
History
Dan Brown caeea658d1 Access: Hardened usage of referring URLs via login 
Adds a more substantial URL check, via a new class which is shared and
used in other parts of the app for consistency.

Thanks to mfk25 for reporting.
2026-07-01 10:45:59 +01:00
..
Activity
Comments: Added visibility check to comment delete
2026-07-01 10:20:32 +01:00
Api
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
Auth
Access: Hardened usage of referring URLs via login
2026-07-01 10:45:59 +01:00
Commands
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
Entity
Content filtering: Added srcset protocol filter
2026-06-30 18:35:34 +01:00
Exports
Exports: Added testing coverage for DOMPDF font usage
2026-04-22 13:12:34 +01:00
Helpers
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
Meta
…
Permissions
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
References
…
Search
Search: Prevented tag search using unusable numbers
2026-06-06 10:37:06 +01:00
Settings
…
Sorting
Sort Rules: Added creation hints to sort rule selection
2026-04-12 14:31:40 +01:00
test-data
Exports: Added testing coverage for DOMPDF font usage
2026-04-22 13:12:34 +01:00
Theme
Theme Modules: Added easier way to insert HTML head content
2026-03-08 10:26:00 +00:00
Unit
SSR: Hardened URL validator against a range of workarounds
2026-04-30 10:18:50 +01:00
Uploads
Attachments: Added more extensive URL filtering
2026-07-01 00:41:19 +01:00
User
User MFA: Reviewed addition of reset, added tests
2026-05-17 13:05:50 +01:00
Util
Access: Hardened usage of referring URLs via login
2026-07-01 10:45:59 +01:00
CreatesApplication.php
…
DebugViewTest.php
Meta: Updated security info and fixed some tests/links
2026-04-30 00:32:27 +01:00
ErrorTest.php
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
FavouriteTest.php
…
HomepageTest.php
…
LanguageTest.php
…
PublicActionTest.php
Images: Increased validation against related page on upload
2026-05-14 18:10:46 +01:00
SecurityHeaderTest.php
CSP: Renamed CSS CSP option
2026-05-26 12:50:19 +01:00
SessionTest.php
…
StatusTest.php
…
TestCase.php
…
UrlTest.php
…