Dan Brown b7325fdf0e Attachments: Moved perm checks before validation ...

Avoids providing responses with potential sensitive attachment info
before permission checks.
Added tests to cover.

Thanks to Rafael Castilho for reporting.

2026-06-07 10:35:14 +01:00

..

AttachmentApiController.php

Maintenance: Updated $request->get instance to use input

2026-04-18 20:43:27 +01:00

AttachmentController.php

Attachments: Moved perm checks before validation

2026-06-07 10:35:14 +01:00

DrawioImageController.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

GalleryImageController.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

ImageController.php

Permissions: Updated usage of controller methods to use enum

2025-09-08 18:14:38 +01:00

ImageGalleryApiController.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00