Andrey Antukh c4dd04353f 🐛 Sanitize SVG files on upload to prevent XSS ...

Add sanitize-svg function that removes dangerous elements and attributes:
- script tags
- foreignObject elements
- Event handler attributes (onload, onmouseover, etc.)
- javascript: URLs from href/xlink:href attributes

Apply sanitization in process-main-image before storing SVG files.

AI-assisted-by: mimo-v2.5-pro

2026-08-05 21:52:59 +02:00

..

access_token.clj

🐛 Prevent MCP tokens from being used as access tokens (#10962)

2026-07-31 13:19:45 +02:00

audit.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

auth.clj

🐛 Normalize string inputs to prevent unfiltered echo (#11061)

2026-08-05 17:54:07 +02:00

binfile.clj

🐛 Close import-binfile schema and remove file-id parameter (#10994)

2026-08-05 17:37:27 +02:00

comments.clj

✨ Enable org owners to view organization teams (#10388)

2026-06-25 13:07:20 +02:00

demo.clj

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

error_reports.clj

✨ Improve error-reports CLI with streaming, time-range, and stats

2026-07-23 13:35:09 +00:00

feedback.clj

🐛 Add size limit and rate limiting to send-user-feedback (#10979) (#10990)

2026-08-05 17:35:59 +02:00

files_create.clj

Merge remote-tracking branch 'origin/staging' into develop

2026-06-01 13:15:57 +02:00

files_share.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

files_snapshot.clj

✨ Enable org owners to view organization teams (#10388)

2026-06-25 13:07:20 +02:00

files_thumbnails.clj

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

files_update.clj

✨ Add nitrate sso wards to organization navigation

2026-06-19 12:03:21 +02:00

files.clj

🐛 Validate library belongs to same team in link/unlink/sync handlers (#11016)

2026-08-05 17:40:04 +02:00

fonts.clj

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

ldap.clj

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

management.clj

✨ Enable org owners to view organization teams (#10388)

2026-06-25 13:07:20 +02:00

media.clj

🐛 Sanitize SVG files on upload to prevent XSS

2026-08-05 21:52:59 +02:00

nitrate.clj

♻️ Rename nitrate config to admin-console (#10929)

2026-08-03 17:23:55 +02:00

profile.clj

🐛 Normalize string inputs to prevent unfiltered echo (#11061)

2026-08-05 17:54:07 +02:00

projects.clj

🐛 Normalize string inputs to prevent unfiltered echo (#11061)

2026-08-05 17:54:07 +02:00

search.clj

🐛 Fix several issues in RPC command handlers (#10670)

2026-07-28 10:59:16 +02:00

teams_invitations.clj

🐛 Add cooldown to prevent duplicate invitation emails (#11063)

2026-08-05 17:53:15 +02:00

teams.clj

🐛 Normalize string inputs to prevent unfiltered echo (#11061)

2026-08-05 17:54:07 +02:00

verify_token.clj

♻️ Rename nitrate config to admin-console (#10929)

2026-08-03 17:23:55 +02:00

viewer.clj

✨ Enable org owners to view organization teams (#10388)

2026-06-25 13:07:20 +02:00

webhooks.clj

🐛 Restrict webhook creation/edit/delete to team members only (#11029)

2026-08-05 17:42:49 +02:00