Dan Brown b7325fdf0e Attachments: Moved perm checks before validation ...

Avoids providing responses with potential sensitive attachment info
before permission checks.
Added tests to cover.

Thanks to Rafael Castilho for reporting.

2026-06-07 10:35:14 +01:00

..

Activity

Testing: Changed ordering in tests to help prevent flaky test

2026-05-19 13:29:26 +01:00

Api

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

Auth

MFA: Added verify attempt rate limiting

2026-05-21 13:25:57 +01:00

Commands

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

Entity

Content Filtering: Limited file protocol to just anchor hrefs

2026-06-06 15:30:57 +01:00

Exports

Exports: Added testing coverage for DOMPDF font usage

2026-04-22 13:12:34 +01:00

Helpers

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

Meta

…

Permissions

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

References

…

Search

Search: Prevented tag search using unusable numbers

2026-06-06 10:37:06 +01:00

Settings

Deps: Updated PHP package versions

2025-12-19 14:22:27 +00:00

Sorting

Sort Rules: Added creation hints to sort rule selection

2026-04-12 14:31:40 +01:00

test-data

Exports: Added testing coverage for DOMPDF font usage

2026-04-22 13:12:34 +01:00

Theme

Theme Modules: Added easier way to insert HTML head content

2026-03-08 10:26:00 +00:00

Unit

SSR: Hardened URL validator against a range of workarounds

2026-04-30 10:18:50 +01:00

Uploads

Attachments: Moved perm checks before validation

2026-06-07 10:35:14 +01:00

User

User MFA: Reviewed addition of reset, added tests

2026-05-17 13:05:50 +01:00

Util

Merge pull request 'Merge v26.03 branch changes' (#6122) from v26-03 into development

2026-05-14 16:08:26 +02:00

CreatesApplication.php

…

DebugViewTest.php

Meta: Updated security info and fixed some tests/links

2026-04-30 00:32:27 +01:00

ErrorTest.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

FavouriteTest.php

…

HomepageTest.php

…

LanguageTest.php

…

PublicActionTest.php

Images: Increased validation against related page on upload

2026-05-14 18:10:46 +01:00

SecurityHeaderTest.php

CSP: Renamed CSS CSP option

2026-05-26 12:50:19 +01:00

SessionTest.php

…

StatusTest.php

…

TestCase.php

Theme System: Split & organised tests, changed module version to string

2026-02-01 16:27:52 +00:00

UrlTest.php

…