9d2b1c1848
- acme.deferred fixture plugin over testdata/deferred (test-only), two controllers, recording Form and Relation hooks, two admins - TestRelationChildScope*: every child route answers 404 for another parent, a hidden parent and another admin's pending child, changes nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist - TestProtectedFile*: foreign, pending and public files 404; only jpeg, png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere
16 lines
298 B
YAML
16 lines
298 B
YAML
fields:
|
|
name:
|
|
label: Name
|
|
type: text
|
|
required: true
|
|
members:
|
|
type: relation-manager
|
|
relation: members
|
|
parts:
|
|
type: relation-manager
|
|
relation: parts
|
|
manual:
|
|
label: Manual
|
|
type: fileupload
|
|
required: true
|