penpot

mirror of https://github.com/penpot/penpot.git synced 2026-08-06 04:48:39 +00:00

History

Andrey Antukh 2e8cdac124 🐛 Add authorization checks to WebSocket subscriptions

Subscribe-file and subscribe-team handlers now verify the requesting
profile has read permissions on the target resource before creating
a subscription. Pointer-update handler now validates that the message
file-id matches the subscribed file-id before publishing.

Closes #11067

AI-assisted-by: mimo-v2.5-pro

2026-08-04 13:30:50 +00:00

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

♻️ Normalize organization naming across Penpot (#10977 )

2026-07-31 12:04:10 +02:00

scripts

♻️ Rename nitrate config to admin-console (#10929 )

2026-08-03 17:23:55 +02:00

src

🐛 Add authorization checks to WebSocket subscriptions