3 Commits

Include renames

Author	SHA1	Message	Date
objecttothis	4bc2bac204	test: add export-all coverage across controllers and helpers ... Add feature tests verifying CSV/PDF/XML/SQL export endpoints work correctly across many controllers, plus helper unit tests and shared fixtures to support them. - Add downloadResponseBody() reflection helper (reads private $binary property on DownloadResponse) to CashupControllerTest, EmployeesControllerTest, ItemKitsControllerTest for asserting streamed download content - Add exportAll CSV/PDF tests for Attributes, Customers, Expenses_categories, Expenses, Giftcards, ItemKits, Cashup, Employees controllers - Add export_helperTest covering CSV sanitization (formula injection guard), JSON/XML/SQL writers, tag sanitization, and file generation - Add Tests/Support/ExportFixtureTrait with reusable fixture objects for sales, employees, customers, suppliers, items, giftcards, item kits, attributes, expenses, cashups, tax rates - Update AGENTS.md: clarify `use` import rule applies to every reference including global-namespace classes (ReflectionClass/ReflectionProperty/Exception) and method-signature type-hints, not just namespaced app classes Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>	2026-10-21 15:47:09 +04:00
jekkos	9eaa2f34f3	chore: strip advisory IDs from code comments and changelog (#4720) ... Per the project's policy of treating security advisory IDs as secret-like, remove the identifiers embedded in source/test comments and CHANGELOG entries. Each keeps its human-readable description (and PR number where present), so traceability is preserved. No logic changes.	2026-09-30 15:49:18 +02:00
objecttothis	d63d31700d	Ensure payload data is escaped to prevent XSS (#4664) ... fix(barcode): escape payload fields to prevent XSS; PSR-12 refactor - Apply `esc()` to name, ID, item number, category, and company name in `Barcode_lib` payloads - Remove redundant `urldecode()` in `Item_kitsController` to prevent triple decoding - Rename variables and methods to camelCase across barcode, item_kits, and tests - Add type hint for `$layoutType` parameter in `manageDisplayLayout` - Add/update unit tests covering escaping and HTTP response assertions Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>	2026-08-28 10:08:31 +04:00