Dan Brown 4e406c41c4 Attachments: Aligned update form permission checks with other actions ...

Thanks to Ashutosh Jena(MAVERICK-VF142) for reporting.
Not considered a significant security issue since it already required
page update permissions, which would generally be considered higher
privileged than the added page view.

2026-07-23 20:57:48 +01:00

..

Access

Access: Hardened usage of referring URLs via login

2026-07-01 10:45:59 +01:00

Activity

Comments: Added visibility check to comment delete

2026-07-01 10:20:32 +01:00

Api

Maintenance: Updated $request->get instance to use input

2026-04-18 20:43:27 +01:00

App

Attachments: Added more extensive URL filtering

2026-07-01 00:41:19 +01:00

Config

CSP: Renamed CSS CSP option

2026-05-26 12:50:19 +01:00

Console

Access: Hardened usage of referring URLs via login

2026-07-01 10:45:59 +01:00

Entities

Permissions: Tweaks/fixed during review of revision-view-all changes

2026-04-19 16:06:31 +01:00

Exceptions

Logs: Prevented NotifyExceptions for reporting to error logs

2026-06-07 11:25:51 +01:00

Exports

Exports: Improved dompdf font loading permission errors

2026-04-22 13:22:20 +01:00

Facades

Played around with a new app structure

2023-05-17 17:56:55 +01:00

Http

API: Added new tags API endpoints

2026-04-12 18:26:00 +01:00

Permissions

Permissions: Started addition of revision-view permission

2026-04-19 12:41:11 +01:00

References

Copying: Fixed issue with non-page links to page permalinks

2025-11-29 20:35:16 +00:00

Search

Search: Prevented tag search using unusable numbers

2026-06-06 10:37:06 +01:00

Settings

Maintenance: Updated $request->get instance to use input

2026-04-18 20:43:27 +01:00

Sorting

Maintenance: Fixed type and CI issues

2026-06-11 14:24:09 +01:00

Theming

Theme Modules: Prevented zip-slip in new module extraction method

2026-04-11 18:49:34 +01:00

Translation

Languages: Enabled Thai as a language option

2026-05-05 20:44:04 +01:00

Uploads

Attachments: Aligned update form permission checks with other actions

2026-07-23 20:57:48 +01:00

Users

User MFA: Reviewed addition of reset, added tests

2026-05-17 13:05:50 +01:00

Util

URLs: Fixed issue in comparisons when elements missing

2026-07-02 10:21:01 +01:00