opensourcepos

0 Fork 0

mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-09-13 13:57:34 -04:00

Files

T

History

objecttothis 9ecabf6f41 fix(sales): harden unsuspend with auth, status gating, and null safety

- Require reports_sales grant on postUnsuspend; return 403 on denial
- Reject unsuspend of non-SUSPENDED sales; skip silently on invalid state
- Move clear_all() after validation so an invalid sale_id no longer wipes
  the active in-progress cart
- Null-guard get_sale_status() on missing row instead of fatal property
  access; widen return type to ?int
- Fix getSaleType null-coalescing — CI4 session default only fires when
  key is unset, not when value is null
- Rename get_sale_type → getSaleType, sale_id → saleId (PSR-12 camelCase)
- Extract SaleFixtureTrait with createSale()/createSuspendedSale(); add
  regression coverage for auth denial, status gating, and cart preservation

2026-09-07 12:18:11 +04:00

ConfigTest.php

fix(config): validate theme param to prevent XSS via invalid theme (#4620 )

2026-08-07 02:18:44 +04:00

CustomersCsvImportTest.php

fix(security): Fix DOMPDF RCE and customer email sanitization (#4568 )

2026-06-09 17:58:52 +02:00

EmployeesControllerTest.php

fix(sales): gate per-record endpoints behind reports_sales grant (#4627 )

2026-08-23 17:40:06 +04:00

HomeTest.php

fix(reports, home): resolve double-URL-decoding bypass for method grants (#4660 ) (#4666 )