Files
penpot/backend
Andrey Antukh fc11fbb8cf 🐛 Trim linked-library data in view-only bundle for share links
The anonymous get-view-only-bundle RPC merged each linked library whole, exposing library pages the share link never granted. For share-link permissions, each library is now reduced to the narrow data keys with its own pages dropped and only the components referenced by the allowed pages kept (nested references followed); membership bundles are unchanged. Closes #11617

AI-assisted-by: muse-spark-1.3-contributor
2026-09-10 13:49:58 +00:00
..