Files
objecttothis 178943400d fix(security): close race conditions in balance/stock updates, harden config
Address [REDACTED] and tighten several config/security areas.

- Make reward points, gift card, and item quantity adjustments atomic
  single-UPDATE operations (Customer, Giftcard, Item_quantity models) to
  prevent concurrent double-spend races; add regression tests using new
  ConcurrentDbRaceTrait, EmployeeFixtureTrait, ItemFixtureTrait
- Add IsLoggedIn filter and Throttle filter wiring in Config/Filters.php,
  Config/Events.php (encryption throttle check, stricter zlib check)
- Add new constants (INSUFFICIENT_GIFTCARD_BALANCE,
  INSUFFICIENT_REWARD_POINTS, INSUFFICIENT_STOCK) in Config/Constants.php
- Add DISALLOW_PASSWORD_CHANGE / DISALLOW_GRANT_CHANGE env flags for
  demo/SSO deployments; normalize .env.example key=value formatting
  (drop spaces around '=')
- Add CI4 conversion migration (ConvertToCI4) handling CI3->CI4
  encryption key conversion
- Add Barcode_lib tests covering XSS-escaping of item/category/company
  name payloads
- Add Georgian (ka) Employees language file
- Update .gitignore for .env.lock/.env.tmp.* and broaden cache ignore
- Update AGENTS.md conventions: PSR-12 variable renaming policy, use
  statements over FQCN, comment discipline, one-test-file-per-class
  rule, stricter language-file translation/alignment rules

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>
2026-09-07 11:57:54 +04:00
..
2024-06-15 17:19:15 +02:00