Andrey Antukh 29dbf9ab12

🐛 Validate content-type on management upload endpoints (#11026) ...

Add media type validation to upload-tempfile and upload-org-logo
management endpoints. Both stored user-supplied mtype without
checking against an allowlist. Only image types and PDF are
permitted. Non-public bucket assets now also carry
Content-Disposition: attachment to prevent inline rendering.

AI-assisted-by: mimo-v2.5-pro

2026-08-17 12:13:56 +02:00

..

data

Merge remote-tracking branch 'origin/staging' into develop

2026-06-01 13:15:57 +02:00

files

🎉 Add repair functions for variant validation errors (#10768)

2026-08-04 16:53:36 +02:00

geom

🐛 Fix nil dereference crash during flex layout drag operations (#10845)

2026-07-31 12:51:35 +02:00

logic

🐛 Fix overrides lost after switch (#10619)

2026-08-10 10:56:04 +02:00

schema

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

svg

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

test_helpers

🎉 Add repair functions for variant validation errors (#10768)

2026-08-04 16:53:36 +02:00

types

🎉 Add repair functions for variant validation errors (#10768)

2026-08-04 16:53:36 +02:00

weak

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

attrs.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

buffer.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

colors.cljc

Merge remote-tracking branch 'origin/staging' into develop

2026-06-01 13:15:57 +02:00

data.cljc

🐛 Normalize string inputs to prevent unfiltered echo (#11061)

2026-08-05 17:54:07 +02:00

debug.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

encoding_impl.js

⬆️ Update backend and common dependencies (#10108)

2026-06-11 10:11:23 +02:00

exceptions.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

features.cljc

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

flags.cljc

♻️ Show subscription section to everybody (#11007)

2026-08-10 13:42:28 +02:00

fressian.clj

🐛 Add recursion depth limit to Fressian reader (#11020)

2026-08-05 17:41:59 +02:00

generic_pool.clj

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

i18n.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

json.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

logging.cljc

⬆️ Update dependencies (#10982)

2026-07-31 18:53:05 +02:00

math.cljc

🐛 Fix layout padding persisted as string after invalid input (#10758)

2026-07-30 12:51:44 +02:00

media.cljc

🐛 Validate content-type on management upload endpoints (#11026)

2026-08-17 12:13:56 +02:00

path_names.cljc

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

perf.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

pprint.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

record.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

schema.cljc

🐛 Fix email validation to reject consecutive dots in domain (#10096)

2026-06-10 19:21:51 +02:00

spec.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

svg.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

text.cljc

Merge remote-tracking branch 'origin/main' into staging

2026-06-01 12:57:39 +02:00

thumbnails.cljc

🎉 Add binfile-v3 export/import file format

2024-10-18 17:19:29 +02:00

time.cljc

Merge remote-tracking branch 'origin/staging' into develop

2026-06-01 13:15:57 +02:00

transit.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

uri.cljc

🐛 Fix SSO failure logging user out instead of showing error page (#11129)

2026-08-11 09:14:29 +02:00

uuid_impl.js

⬆️ Update backend and common dependencies (#10108)

2026-06-11 10:11:23 +02:00

uuid.cljc

✨ Add nitrate sso wards to organization navigation

2026-06-19 12:03:21 +02:00

UUIDv8.java

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

version.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00

weak.cljc

📎 Update Kaleidos Copyright (#9929)

2026-05-29 11:24:58 +02:00