penpot

mirror of https://github.com/penpot/penpot.git synced 2026-08-08 05:48:50 +00:00

History

Andrey Antukh 2a0b75fe09 🐛 Validate content-type on management upload endpoints

Add media type validation to upload-tempfile and upload-org-logo
management endpoints. Both stored user-supplied mtype without
checking against an allowlist. Only image types and PDF are
permitted. Non-public bucket assets now also carry
Content-Disposition: attachment to prevent inline rendering.

AI-assisted-by: mimo-v2.5

2026-08-03 18:26:47 +02:00

dev

📎 Update Kaleidos Copyright (#9929 )

2026-05-29 11:24:58 +02:00

scripts

📎 Update common test script to match package.json changes

2026-07-20 07:42:27 +00:00

src/app/common

🐛 Validate content-type on management upload endpoints

2026-08-03 18:26:47 +02:00

target/classes/app/common

🐛 Fix incorrect arc to curve conversion in some cases