opensourcepos

mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-03-09 18:53:01 -04:00

Files

jekkos 31d25e06dc fix(security): whitelist and validate invoice template types (#4393 )

- Add whitelist validation for invoice_type to prevent path traversal and LFI
- Validate invoice_type against allowed values in Sale_lib
- Sanitize invoice_type input in Config controller before saving
- Default to 'invoice' template for invalid types

Security: Prevents arbitrary file inclusion via user-controlled invoice_type config

2026-03-06 13:18:47 +01:00

.gitkeep

Corrected link in README.md

2024-06-15 17:19:15 +02:00

Barcode_lib.php

Use Content-Type application/json for AJAX responses (#4357 )

2026-03-04 21:42:35 +01:00

Email_lib.php

Fix attachment cid (#4314 )

2025-11-23 21:37:32 +01:00

index.html

Replace tabs with spaces (#4196 )