penpot

mirror of https://github.com/penpot/penpot.git synced 2026-09-25 13:26:16 +00:00

History

Andrey Antukh a91502f5e7 🐛 Validate library belongs to same team in link/unlink/sync handlers

Add check-library-team-ownership! helper that verifies both the file
and library share the same team before creating or modifying library
relations. This prevents cross-team library injection where a user
with edit permissions on files in different teams could link them
across team boundaries.

Applied to link-file-to-library, unlink-file-from-library, and
update-file-library-sync-status handlers.

AI-assisted-by: mimo-v2.5

2026-08-03 18:26:47 +02:00

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

♻️ Normalize organization naming across Penpot (#10977 )

2026-07-31 12:04:10 +02:00

scripts

♻️ Rename nitrate config to admin-console (#10929 )

2026-08-03 17:23:55 +02:00

src

🐛 Validate library belongs to same team in link/unlink/sync handlers