summercms

Files

Jakub Zych ebdfd78ab4 docs(storage): pin the script-chunk PNG upload and split the uploads deploy note (quick-261028-r16)

- TestPNGScriptChunkNaming (no Docker) and TestStoreScriptChunkPNG (Postgres)
  pin the todo exploit: a decodable PNG with a script tEXt chunk uploaded in
  image mode as x.html is stored and served as .png, bytes unchanged
- storage deploy note separates static servers (nosniff, nginx extension
  allow-list, 404 otherwise) from public buckets, which send the stored
  sniffed Content-Type; attachments.md points to it

2026-10-28 19:42:28 +01:00

attachments.md

docs(storage): pin the script-chunk PNG upload and split the uploads deploy note (quick-261028-r16)

2026-10-28 19:42:28 +01:00

casts-and-validation.md

feat(13-01): add the prohibited rule and dated-download and notification masks

2026-10-03 06:32:46 +02:00

migrations.md

fix(build): order scaffolded migrations after every existing one (quick-261028-pq8)

2026-10-28 18:49:17 +01:00

models.md

feat(12.2-01): add lagoon.Date and lagoon.TimeOfDay with Fill and required support