Paul Nothaft b36dd0ebfe fix(backend): contain and sanitize the SQLite restore source path ...

The restore flow accepted an unvalidated database.backup_file from
the manifest (absolute paths and traversal both worked, and no
containment check enforced the configured backup root), then
interpolated it unescaped into a `sqlite3 .restore '<path>'` command,
letting an attacker-chosen source file replace the live database.

2026-09-10 20:42:38 +02:00

..

adminArchivesQuery.test.js

fix(archives): sort and total on real archive sizes, escape LIKE wildcards

2026-09-02 09:43:10 +02:00

adminCategoriesNameLength.test.js

fix(categories): validate category name length instead of 500ing

2026-09-01 16:23:28 +02:00

adminCrmAuth.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

adminEmail.queueRedaction.test.js

fix(email): scrub gallery passwords from the sent-mail archive (#1340)

2026-09-07 20:02:57 +02:00

adminEventQr.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

adminEvents.recoverablePassword.test.js

feat(security): opt-in recoverable gallery passwords (#1341)

2026-09-07 20:36:48 +02:00

adminEvents.smoke.test.js

fix: remove the fragmentation handling stranded by #1303

2026-09-05 23:41:17 +02:00

adminEventsCascadeStorage.test.js

fix(events): delete stored objects when cascading an event delete (#1051)

2026-09-01 08:17:04 +02:00

adminEventsSearchEscaping.test.js

fix(search): stop escapeLikePattern corrupting bound search values

2026-09-02 09:43:10 +02:00

adminFeedbackWordFilterSeverity.test.js

fix(feedback): align word-filter severity vocabulary with the admin UI

2026-09-01 16:23:22 +02:00

adminMfa.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

adminNewsletters.test.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

adminPhotoCategoryScope.test.js

fix(upload): scope category ids, stop temp-file leaks, split the video cap

2026-09-02 09:43:10 +02:00

adminPhotoContentType.test.js

fix(admin): code-review follow-ups on #910/#916 (MIME resolver + expiry reactivity) (#921)

2026-07-30 12:14:41 +02:00

adminPhotoUploadSizeLimit.test.js

fix(security): chunked-upload init checks the size cap before the type allow-list

2026-09-03 10:58:11 +02:00

adminPhotoUploadVideoSizeLimit.test.js

fix(upload): scope category ids, stop temp-file leaks, split the video cap

2026-09-02 09:43:10 +02:00

adminRememberMe.test.js

feat(auth): make the admin "Remember me" checkbox actually do something (#1186) (#1195)

2026-08-26 21:13:23 +02:00

adminRolesGuards.test.js

feat(permissions): granular permission gating + role editor & presets (#747, phase 1 of #743) (#1045)

2026-08-16 14:59:52 +02:00

adminSettingsProtectedKeys.test.js

feat(permissions): granular permission gating + role editor & presets (#747, phase 1 of #743) (#1045)

2026-08-16 14:59:52 +02:00

adminSettingsRateLimit.test.js

feat(settings): expose the API rate limiter in the Security tab (#1338)

2026-09-07 20:02:40 +02:00

adminSystemHealthWaitingEmails.test.js

fix(email): wire the settings status card, and cap-aware truncation

2026-09-02 15:32:35 +02:00

adminThumbnails.previewColumns.test.js

fix(preview): generate lightbox previews for external/reference photos (#1078) (#1079)

2026-08-19 10:17:44 +02:00

adminUsage.test.js

fix(usage): preserve consent choices and make the prompt accessible

2026-09-08 17:22:47 +02:00

adminUsers.dateNormalize.test.js

fix(admin-users): normalise date fields to ISO across DB drivers (#485)

2026-05-14 20:53:10 +02:00

authSession.symmetry.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

authShareLoginPassword.test.js

fix(security): share-login must not bypass gallery password (GHSA-9hmx-68vc-qpqw)

2026-07-16 10:55:10 +02:00

authzPermissionGaps.test.js

fix(events): drop non-canonical keys from the event update before any check runs (#1346)

2026-09-07 22:30:13 +02:00

backupExportSuperadmin.test.js

fix(security): close GHSA-g94x (cross-gallery photo read) + GHSA-pv6w (admin DB export) (#924)

2026-07-30 14:24:28 +02:00

dashboardScope.test.js

fix(admin): make "Storage used" report storage used (#1164) (#1170)

2026-08-26 08:53:39 +02:00

databaseBackupConfigDestination.test.js

fix(backup): honor the configured database-backup destination path (#1366)

2026-09-09 22:27:18 +02:00

databaseBackupDestination.test.js

fix(security): backup/restore hardening — public-dir DB dump, restore path allowlist, gunzip bound, manifest keying (#956)

2026-08-02 21:17:05 +02:00

feedbackBlockSeverity.test.js

fix(feedback): make the "block" severity tier actually reject

2026-09-02 09:30:49 +02:00

feedbackOwnership.test.js

fix(security): authz/ownership gaps (token binding, auth revocation, feedback/customer ownership, token logging) (#950)

2026-08-02 08:38:24 +02:00

galleryAccessPolicy.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

galleryDownloadStorage.test.js

fix: single-photo gallery downloads 404 on S3 storage backends (#1048)

2026-09-01 08:17:32 +02:00

galleryFolderCategories.test.js

feat(gallery): folders that contain photos instead of filtering them (#1160) (#1161)

2026-08-28 08:03:49 +02:00

galleryResolveShareToken.test.js

fix(security): unauth share_token leak (HIGH) + restore path-traversal, logo file-read, branding path keys (#946)

2026-08-02 08:37:48 +02:00

gallerySqliteBooleanFlags.test.js

fix(gallery): coerce SQLite 0/1 booleans in the guest surface (#1028) (#1034)

2026-08-13 18:50:48 +02:00

gallerySqliteCaptureSort.test.js

fix(external-media): record capture dates on import, and backfill existing libraries (#1172) (#1179)

2026-08-26 08:43:13 +02:00

galleryTokenJti.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

galleryUploadStatus.test.js

fix(gallery): no-store private JSON, and give guest uploads a real status

2026-09-02 09:43:10 +02:00

guestTokenTtl.test.js

fix(guests): surface duplicate guest registrations, and stop making so many (#1210) (#1216)

2026-08-28 08:27:15 +02:00

hiddenPhotoAccessControl.test.js

fix(security): block guest access to hidden/client-only photos across bulk + secure routes (#939)

2026-08-01 17:36:15 +02:00

legacyEventsRouterRemoved.test.js

fix(security): remove unguarded legacy /api/events router (GHSA-4j34-x562-5vfq)

2026-07-17 09:16:51 +02:00

logoDiagnostic.test.js

fix(security): escape brand tokens, block tracker redirects, trim logo diagnostic (GHSA-j347, mw76, 29vm) (#961)

2026-08-02 21:17:17 +02:00

logoutRevocation.test.js

fix: retain revocations for tokens without expiry

2026-09-08 15:54:01 +02:00

passwordStrengthDos.test.js

fix(security): stop reflecting submitted values in validation errors everywhere, cap credential lengths, close the login timing oracle

2026-09-03 10:53:30 +02:00

photoEngagementCounters.test.js

fix(admin): expose view/download counters in the admin photos list (#895 follow-up) (#914)

2026-07-29 22:23:38 +02:00

projectOwnership.test.js

fix(security): enforce project ownership on project + project-email routes (GHSA-wrg5, GHSA-93x4) (#960)

2026-08-02 21:24:38 +02:00

projectOwnershipEdgeCases.test.js

fix(security): enforce project ownership on project + project-email routes (GHSA-wrg5, GHSA-93x4) (#960)

2026-08-02 21:24:38 +02:00

publicContracts.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

publicPaymentCheck.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

publicQuotes.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

publicUnsubscribe.test.js

feat(crm): newsletter campaigns behind a newsletters flag (#1264)

2026-09-04 14:32:31 +02:00

restorePathAllowlist.test.js

fix(backend): contain and sanitize the SQLite restore source path

2026-09-10 20:42:38 +02:00

secureImageTokenBinding.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

slideshowAdmin.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

slideshowPublic.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

usageAdoptionEvidence.test.js

feat(usage): distinguish real edits and template delivery with v5 consent (#1339)

2026-09-07 20:03:15 +02:00

usageXmpEvidence.test.js

feat(usage): add consented beta capabilities and gallery photo totals

2026-09-06 19:23:14 +02:00

v1EventOwnership.test.js

fix(security): enforce event ownership on the v1 API surface (GHSA-9697) (#957)

2026-08-02 21:17:14 +02:00

v1TokenPermissions.test.js

fix(security): enforce event ownership on the v1 API surface (GHSA-9697) (#957)

2026-08-02 21:17:14 +02:00