objecttothis 6403a59b8b Merge remote-tracking branch 'OpensourcePOS/master' into feat-job-queue-phase-1

2026-09-29 15:35:28 +04:00

..

CashupControllerTest.php

Fix GHSA-frx7-c5vv-m3mr: recompute cashup total server-side and force owner identity (#4706)

2026-09-21 17:37:07 +02:00

ConfigTest.php

fix(locale): validate language_code against known locales to block path traversal (#4704)

2026-09-21 17:36:50 +02:00

CustomersCsvImportTest.php

fix(tests): resolve all phpunit failures — clean-DB suite green (#4626) (#4691)

2026-09-08 21:49:28 +02:00

EmployeesControllerTest.php

fix(tests): resolve all phpunit failures — clean-DB suite green (#4626) (#4691)

2026-09-08 21:49:28 +02:00

HomeTest.php

fix(reports, home): resolve double-URL-decoding bypass for method grants (#4660) (#4666)

2026-08-31 13:33:09 +04:00

ItemKitsControllerTest.php

Ensure payload data is escaped to prevent XSS (#4664)

2026-08-28 10:08:31 +04:00

ItemsControllerTest.php

fix(security): HTML-escape attribute dropdown option labels in items attributes view (#4715)

2026-09-28 08:44:37 +02:00

JobsControllerTest.php

feat(jobs): add task time warning threshold setting

2026-09-23 13:22:16 +04:00

LoginTest.php

Feature: CodeIgniter Throttler (#4619)

2026-08-19 00:25:22 +04:00

ReportsControllerTest.php

fix(reports, home): resolve double-URL-decoding bypass for method grants (#4660) (#4666)

2026-08-31 13:33:09 +04:00

SalesControllerTest.php

fix(tests): resolve all phpunit failures — clean-DB suite green (#4626) (#4691)

2026-09-08 21:49:28 +02:00