penpot

mirror of https://github.com/penpot/penpot.git synced 2026-08-08 05:48:50 +00:00

History

Andrey Antukh 2101d657e5 🐛 Fix SNS signature verification issues

Address code review findings:

- Restrict URL validation to sns.<region>.amazonaws.com only
  (prevents attacker-controlled S3 buckets from being accepted)
- Add support for SignatureVersion 2 (SHA256withRSA)
- Fix resource leak by wrapping certificate stream in with-open
- Return proper HTTP status codes (4xx for invalid messages,
  5xx for transient failures)
- Add comprehensive tests for URL validation, signature versions,
  and HTTP response codes

Closes #11092

AI-assisted-by: qwen3.7-plus

2026-08-05 14:57:26 +00:00

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

♻️ Normalize organization naming across Penpot (#10977 )

2026-07-31 12:04:10 +02:00

scripts

✨ Add media-processor service for image and font processing (#10767 )

2026-08-05 09:41:48 +02:00

src

🐛 Fix SNS signature verification issues