3 people 2c69dc0c34 fix(config): validate theme param to prevent XSS via invalid theme (#4620) ...

* fix(config): validate theme param to prevent XSS via invalid theme

Add validation rule for theme field before batch save, rejecting
requests with unrecognized theme values. Add test coverage for
theme validation in postSaveGeneral.

Signed-off-by: Travis Garrison <travis@chiraqbookstore.com>

* Update app/Config/Validation/OSPOSRules.php

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

---------

Signed-off-by: Travis Garrison <travis@chiraqbookstore.com>
Co-authored-by: Travis Garrison <travis@chiraqbookstore.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

2026-08-07 02:18:44 +04:00

..

Boot

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Validation

fix(config): validate theme param to prevent XSS via invalid theme (#4620)

2026-08-07 02:18:44 +04:00

App.php

Add fallback for allowedHostnames environment variable (#4565)

2026-06-03 22:00:30 +04:00

Autoload.php

chore(deps): upgrade dompdf from v2.0.8 to v3.1.6 (#4610)

2026-08-01 00:24:02 +02:00

Cache.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Constants.php

Refactor: Move ADMIN_MODULES to constants, rename methods to camelCase

2026-03-06 17:25:25 +01:00

ContentSecurityPolicy.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Cookie.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Cors.php

Bump CodeIgniter to 4.5.1

2024-06-15 17:19:15 +02:00

CURLRequest.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Database.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

DocTypes.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Email.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Encryption.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Events.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Exceptions.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Feature.php

Feature bump ci to 4.6.0 (#4197)

2025-04-03 14:16:06 +04:00

Filters.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

ForeignCharacters.php

Upgrade CI to 4.4.3

2024-06-15 17:19:15 +02:00

Format.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Generators.php

Bump CodeIgniter to 4.5.1

2024-06-15 17:19:15 +02:00

Honeypot.php

Corrected link in README.md

2024-06-15 17:19:15 +02:00

Hostnames.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Images.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Kint.php

Feature bump ci to 4.6.0 (#4197)

2025-04-03 14:16:06 +04:00

Logger.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Migrations.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Mimes.php

chore: sync project files to match upstream templates (#4537)

2026-05-12 15:55:36 +02:00

Modules.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Optimize.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

OSPOS.php

Bugfixes to get Migration working on MySQL and MariaDB (#4551)

2026-05-19 16:02:05 +04:00

Pager.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

Paths.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Publisher.php

CodeIgniter 4.4.5 version bump

2024-06-15 17:19:15 +02:00

Routes.php

fix: Handle empty database on fresh install (#4467)

2026-04-08 20:19:25 +00:00

Routing.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Security.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Services.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Session.php

fix: Catch mysqli_sql_exception in DB fallback handlers for fresh Docker installs (#4525)

2026-04-22 21:13:52 +02:00

Toolbar.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

UserAgents.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

Validation.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

View.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

WorkerMode.php

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00