Travis Garrison a8219942e2 Merge remote-tracking branch 'OpensourcePOS/master' into feature-stock-location-dropdown-order

2026-08-19 10:39:21 +04:00

..

ConfigTest.php

fix(config): validate theme param to prevent XSS via invalid theme (#4620)

2026-08-07 02:18:44 +04:00

CustomersCsvImportTest.php

fix(security): Fix DOMPDF RCE and customer email sanitization (#4568)

2026-06-09 17:58:52 +02:00

EmployeesControllerTest.php

Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391)

2026-03-05 19:46:39 +01:00

HomeTest.php

Fix IDOR vulnerability in password change (GHSA-mcc2-8rp2-q6ch) (#4427)

2026-03-13 12:13:21 +01:00

ItemsCsvImportTest.php

Refactor Stock_location model to adopt camelCase method naming, introduce is_default and sort_order support, add migration, UI updates, default location handling, and item synchronization.

2026-08-18 20:09:52 +04:00

LoginTest.php

Feature: CodeIgniter Throttler (#4619)

2026-08-19 00:25:22 +04:00

ReportsControllerTest.php

Fix broken object-level authorization in Employees controller (CVE-worthy) (#4391)

2026-03-05 19:46:39 +01:00

SalesControllerTest.php

fix(xss): remove redundant escaping that double-encoded item attribute values (#4628)

2026-08-09 11:37:38 +04:00