3 people 2c69dc0c34 fix(config): validate theme param to prevent XSS via invalid theme (#4620) ...

* fix(config): validate theme param to prevent XSS via invalid theme

Add validation rule for theme field before batch save, rejecting
requests with unrecognized theme values. Add test coverage for
theme validation in postSaveGeneral.

Signed-off-by: Travis Garrison <travis@chiraqbookstore.com>

* Update app/Config/Validation/OSPOSRules.php

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

---------

Signed-off-by: Travis Garrison <travis@chiraqbookstore.com>
Co-authored-by: Travis Garrison <travis@chiraqbookstore.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

2026-08-07 02:18:44 +04:00

..

ConfigTest.php

fix(config): validate theme param to prevent XSS via invalid theme (#4620)

2026-08-07 02:18:44 +04:00

CustomersCsvImportTest.php

fix(security): Fix DOMPDF RCE and customer email sanitization (#4568)

2026-06-09 17:58:52 +02:00

EmployeesControllerTest.php

Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391)

2026-03-05 19:46:39 +01:00

HomeTest.php

Fix IDOR vulnerability in password change (GHSA-mcc2-8rp2-q6ch) (#4427)

2026-03-13 12:13:21 +01:00

ItemsCsvImportTest.php

[Feature]: Case-sensitive attribute updates and CSV Import attribute deletion capability (#4384)

2026-04-09 11:13:22 +04:00

ReportsControllerTest.php

Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391)

2026-03-05 19:46:39 +01:00