Andrey Antukh fb07273897

🐛 Validate library belongs to same team in link/unlink/sync handlers (#11016) ...

Add check-library-team-ownership! helper that verifies both the file
and library share the same team before creating or modifying library
relations. This prevents cross-team library injection where a user
with edit permissions on files in different teams could link them
across team boundaries.

Applied to link-file-to-library, unlink-file-from-library, and
update-file-library-sync-status handlers.

AI-assisted-by: mimo-v2.5

2026-08-05 17:40:04 +02:00

..

backend_tests

🐛 Validate library belongs to same team in link/unlink/sync handlers (#11016)

2026-08-05 17:40:04 +02:00

e2e

✨ Add Node.js E2E API tests for backend (#10787)

2026-08-05 10:15:41 +02:00