objecttothis 7a82da5b66 fix(config): harden sendmail path validation and license page rendering ...

- Broaden OSPOSRules filesystem path regex to allow space, colon,
  and backslash for Windows sendmail paths while still excluding
  shell metacharacters used unescaped in popen(); update docblock
  accordingly.
- Restore/translate mailpath_invalid message across all language
  files so users get a real error string instead of empty text.
- Guard Config controller license rendering against malformed or
  non-array npm-prod/npm-dev LICENSES JSON, skipping entries
  missing required keys instead of raising warnings.
- Document Node.js 20+ requirement in BUILD.md for license
  reporting dependency.
- Remove security advisory IDs/URLs from INSTALL.md and code
  comments per new AGENTS.md policy against referencing CVE/GHSA
  identifiers anywhere in the repo.

Signed-off-by: objecttothis <17935339+objecttothis@users.noreply.github.com>

2026-09-10 18:07:18 +04:00

..

Attributes.php

fix(xss): remove redundant escaping that double-encoded item attribute values (#4628)

2026-08-09 11:37:38 +04:00

BaseController.php

chore: sync project files to match upstream templates (#4537)

2026-05-12 15:55:36 +02:00

Cashups.php

Add filter persistence for table views via URL query string (#4400)

2026-03-11 20:11:00 +01:00

Config.php

fix(config): harden sendmail path validation and license page rendering

2026-09-10 18:07:18 +04:00

Customers.php

feat(plugins): add $pluginData support for events and form submissions

2026-07-09 15:32:27 +04:00

Employees.php

Merge remote-tracking branch 'OpensourcePOS/master' into plugin-system-fresh

2026-09-09 12:26:08 +04:00

Expenses_categories.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Expenses.php

Refactoring and bugfixes

2026-05-18 16:06:23 +04:00

Giftcards.php

fix(giftcard): correct return type and rename getGiftcardId method (#4600)

2026-07-24 01:46:52 +04:00

Home.php

Merge branch 'master' into plugin-system-fresh

2026-08-31 16:18:59 +04:00

index.html

Replace tabs with spaces (#4196)

2025-03-28 21:24:21 +04:00

Item_kits.php

Merge branch 'master' into plugin-system-fresh

2026-08-31 16:18:59 +04:00

Items.php

Merge remote-tracking branch 'OpensourcePOS/master' into plugin-system-fresh

2026-09-02 11:35:39 +04:00

Login.php

fix(plugins): block install completion until plugin migrations run

2026-09-10 12:26:51 +04:00

Messages.php

Refactor get_info to getInfo

2026-05-18 16:12:38 +04:00

No_access.php

Feature admin account safeguards (#4657)

2026-08-27 11:29:32 +04:00

Office.php

Use Content-Type application/json for AJAX responses (#4357)

2026-03-04 21:42:35 +01:00

Persons.php

Refactor get_info to getInfo

2026-05-18 16:12:38 +04:00

Plugins.php

feat(plugins): add uninstall confirmation modal and soft-delete uninstall

2026-07-07 17:54:18 +04:00

Receivings.php

feat(plugins): add $pluginData support for events and form submissions

2026-07-09 15:32:27 +04:00

Reports.php

Merge branch 'master' into plugin-system-fresh

2026-08-31 16:18:59 +04:00

Sales.php

fix(bootstrap-table): resolve lang file mismatch and improve locale handling

2026-09-08 13:47:14 +04:00

Secure_Controller.php

Merge remote-tracking branch 'OpensourcePOS/master' into plugin-system-fresh

2026-09-02 11:35:39 +04:00

Suppliers.php

Refactor get_info to getInfo

2026-05-18 16:12:38 +04:00

Tax_categories.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Tax_codes.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Tax_jurisdictions.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00

Taxes.php

fix(security): prevent SQL injection in tax controller sort columns

2026-04-06 18:37:07 +00:00