opensourcepos

mirror/opensourcepos

0 Fork 0

mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-10-02 15:45:09 -04:00

Commit Graph

Author	SHA1	Message	Date
jekkos	9eaa2f34f3	chore: strip advisory IDs from code comments and changelog (#4720 ) Per the project's policy of treating security advisory IDs as secret-like, remove the identifiers embedded in source/test comments and CHANGELOG entries. Each keeps its human-readable description (and PR number where present), so traceability is preserved. No logic changes.	2026-09-30 15:49:18 +02:00
objecttothis	d63d31700d	Ensure payload data is escaped to prevent XSS (#4664 ) fix(barcode): escape payload fields to prevent XSS; PSR-12 refactor - Apply `esc()` to name, ID, item number, category, and company name in `Barcode_lib` payloads - Remove redundant `urldecode()` in `Item_kitsController` to prevent triple decoding - Rename variables and methods to camelCase across barcode, item_kits, and tests - Add type hint for `$layoutType` parameter in `manageDisplayLayout` - Add/update unit tests covering escaping and HTTP response assertions Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>	2026-08-28 10:08:31 +04:00

Author

SHA1

Message

Date

jekkos

9eaa2f34f3

chore: strip advisory IDs from code comments and changelog (#4720 )

Per the project's policy of treating security advisory IDs as
secret-like, remove the identifiers embedded in source/test comments
and CHANGELOG entries. Each keeps its human-readable description (and
PR number where present), so traceability is preserved. No logic changes.

2026-09-30 15:49:18 +02:00

objecttothis

d63d31700d

Ensure payload data is escaped to prevent XSS (#4664 )

fix(barcode): escape payload fields to prevent XSS; PSR-12 refactor

- Apply `esc()` to name, ID, item number, category, and company name in `Barcode_lib` payloads
- Remove redundant `urldecode()` in `Item_kitsController` to prevent triple decoding
- Rename variables and methods to camelCase across barcode, item_kits, and tests
- Add type hint for `$layoutType` parameter in `manageDisplayLayout`
- Add/update unit tests covering escaping and HTTP response assertions

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>

2026-08-28 10:08:31 +04:00