Chan ac3950e36c

🐛 Fix CORS middleware reflecting arbitrary origins (#9675) ...

* ⏪ Align profile and dashboard files with penpot develop

* 🐛 Fix CORS origin allowlist for issue #9659

---------

Signed-off-by: Chan <101856681+enjoyandlove@users.noreply.github.com>
Co-authored-by: Andrey Antukh <niwi@niwi.nz>

2026-05-29 11:23:16 +02:00

..

test_files

Merge remote-tracking branch 'origin/main' into staging

2026-05-10 09:16:41 +02:00

auth_oidc_test.clj

🐛 Fix PENPOT_OIDC_USER_INFO_SOURCE flag being silently ignored (#9114)

2026-04-24 12:14:46 +02:00

binfile_test.clj

♻️ Refactor time related namespaces

2025-08-01 11:20:01 +02:00

bounce_handling_test.clj

♻️ Refactor internal tokens API

2025-10-07 12:08:00 +02:00

db_test.clj

✨ Add climit impl and config for file snapshot methods (#9722)

2026-05-19 14:30:44 +02:00

email_blacklist_test.clj

🚑 Fix email blacklisting (#9122)

2026-04-23 09:42:40 +02:00

email_sending_test.clj

✨ Add proper backend integration of for new feedback form

2025-10-17 09:40:27 +02:00

helpers.clj

🎉 Add telemetry anonymous event collection (#9483)

2026-05-11 12:42:01 +02:00

http_assets_test.clj

🐛 Fix broken authentication on /assets handlers

2026-05-15 12:05:02 +02:00

http_management_test.clj

♻️ Make the SSO code more modular (#7575)

2025-11-12 12:49:10 +01:00

http_middleware_security.clj

✨ Add client header check middleware

2025-10-07 12:47:14 +02:00

http_middleware_test.clj

🐛 Fix CORS middleware reflecting arbitrary origins (#9675)

2026-05-29 11:23:16 +02:00

loggers_webhooks_test.clj

🐛 Harden outbound HTTP requests against SSRF and restrict assets handlers (#9390)

2026-05-08 09:18:22 +02:00

media_sanitize_test.clj

🐛 Harden outbound HTTP requests against SSRF and restrict assets handlers (#9390)

2026-05-08 09:18:22 +02:00

rpc_access_tokens_test.clj

⏪ Backport MCP from staging (part 1)

2026-04-20 19:37:02 +02:00

rpc_audit_test.clj

🎉 Add telemetry anonymous event collection (#9483)

2026-05-11 12:42:01 +02:00

rpc_comment_test.clj

♻️ Refactor file storage

2025-10-13 12:24:05 +02:00

rpc_cond_middleware_test.clj

⬆️ Update yetti and http server dependency

2024-10-22 20:23:38 +02:00

rpc_doc_test.clj

🐛 Fix incorrect content-type on doc endpoint response (#9681)

2026-05-18 12:54:16 +02:00

rpc_file_snapshot_test.clj

✨ Make the virtual clock by profile and not global

2026-01-09 12:58:44 +01:00

rpc_file_test.clj

🐛 Fix library updates reappear after file is reloaded (#9563)

2026-05-13 11:29:05 +02:00

rpc_file_thumbnails_test.clj

🐛 Prevent viewers from overwriting file thumbnails (#9285)

2026-05-11 14:38:40 +02:00

rpc_font_test.clj

Merge remote-tracking branch 'origin/main' into staging

2026-05-14 15:24:29 +02:00

rpc_management_nitrate_test.clj

🐛 Fix default team showing up in count

2026-05-27 13:36:35 +02:00

rpc_management_test.clj

♻️ Refactor file storage

2025-10-13 12:24:05 +02:00

rpc_media_test.clj

🐛 Harden outbound HTTP requests against SSRF and restrict assets handlers (#9390)

2026-05-08 09:18:22 +02:00

rpc_nitrate_test.clj

🐛 Fix default team showing up in count

2026-05-27 13:36:35 +02:00

rpc_profile_test.clj

Merge remote-tracking branch 'origin/main' into staging

2026-05-06 15:06:59 +02:00

rpc_project_test.clj

💄 Add format rule for code comments (#8211)

2026-01-27 15:07:18 +01:00

rpc_quotes_test.clj

✨ Use a prefixed dir for storing temp files

2024-02-14 09:53:54 +01:00

rpc_team_test.clj

✨ Improve team name validation (#9176)

2026-04-29 08:59:09 +02:00

rpc_viewer_test.clj

🐛 Fix obfuscate-email crashing on malformed email or dotless domain (#9120)

2026-04-24 09:09:49 +02:00

rpc_webhooks_test.clj

🐛 Harden outbound HTTP requests against SSRF and restrict assets handlers (#9390)

2026-05-08 09:18:22 +02:00

storage_test.clj

✨ Add 2h min-age threshold to storage/gc_touched task

2026-04-22 08:48:04 +02:00

tasks_telemetry_test.clj

🎉 Add telemetry anonymous event collection (#9483)

2026-05-11 12:42:01 +02:00

util_blob_test.clj

🎉 Add telemetry anonymous event collection (#9483)

2026-05-11 12:42:01 +02:00

util_objects_map_test.clj

♻️ Use direct schemas instead of references

2025-08-20 12:33:07 +02:00

util_pointer_map_test.clj

💄 Fix format issues on backend module

2023-11-29 12:55:58 +01:00

util_ssrf_test.clj

✨ Add diagnostic keys to SSRF validation exceptions

2026-05-18 15:57:55 +00:00