- acme.deferred fixture plugin over testdata/deferred (test-only), two controllers, recording Form and Relation hooks, two admins - TestRelationChildScope*: every child route answers 404 for another parent, a hidden parent and another admin's pending child, changes nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist - TestProtectedFile*: foreign, pending and public files 404; only jpeg, png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere
38 lines
815 B
YAML
38 lines
815 B
YAML
fields:
|
|
name:
|
|
label: Name
|
|
type: text
|
|
required: true
|
|
released_on:
|
|
label: Released on
|
|
type: datepicker
|
|
mode: date
|
|
minDate: 2000-01-01
|
|
maxDate: 2030-12-31
|
|
starts_at:
|
|
label: Starts at
|
|
type: datepicker
|
|
mode: datetime
|
|
minDate: 2000-01-01
|
|
maxDate: 2030-12-31
|
|
opens_at:
|
|
label: Opens at
|
|
type: datepicker
|
|
mode: time
|
|
members:
|
|
type: relation-manager
|
|
relation: members
|
|
parts:
|
|
type: relation-manager
|
|
relation: parts
|
|
photos:
|
|
label: Photos
|
|
type: fileupload
|
|
mode: image
|
|
maxFiles: 3
|
|
manual:
|
|
label: Manual
|
|
type: fileupload
|
|
fileTypes: [pdf, png, svg, txt, html]
|
|
useCaption: true
|