- acme.deferred fixture plugin over testdata/deferred (test-only), two controllers, recording Form and Relation hooks, two admins - TestRelationChildScope*: every child route answers 404 for another parent, a hidden parent and another admin's pending child, changes nothing; undeclared toolbar buttons 403 before SQL; pivot whitelist - TestProtectedFile*: foreign, pending and public files 404; only jpeg, png, gif and webp inline; nosniff, no-store and sandbox CSP everywhere
20 lines
379 B
YAML
20 lines
379 B
YAML
fields:
|
|
label:
|
|
label: Label
|
|
type: text
|
|
required: true
|
|
due_on:
|
|
label: Due on
|
|
type: datepicker
|
|
mode: date
|
|
minDate: 2020-01-01
|
|
images:
|
|
label: Images
|
|
type: fileupload
|
|
mode: image
|
|
useCaption: true
|
|
sheet:
|
|
label: Sheet
|
|
type: fileupload
|
|
fileTypes: [txt, pdf]
|