Paul Nothaft b36dd0ebfe fix(backend): contain and sanitize the SQLite restore source path ...

The restore flow accepted an unvalidated database.backup_file from
the manifest (absolute paths and traversal both worked, and no
containment check enforced the configured backup root), then
interpolated it unescaped into a `sqlite3 .restore '<path>'` command,
letting an attacker-chosen source file replace the live database.

2026-09-10 20:42:38 +02:00

..

backgroundProcessor.test.js

test(upload): unit tests for backgroundProcessor + processPhoto

2026-05-02 22:56:04 +02:00

backupIntegrityService.test.js

fix(tests): raise jest timeouts to survive the growing migration chain (#860)

2026-07-22 21:27:12 +02:00

backupRestoreHardening.test.js

fix(security): backup/restore hardening — public-dir DB dump, restore path allowlist, gunzip bound, manifest keying (#956)

2026-08-02 21:17:05 +02:00

backupService.enhanced.test.js

test: repair four stale backend suites

2026-09-01 16:29:03 +02:00

billingRecipients.test.js

feat(crm): route billing docs to billing_email when set

2026-05-27 14:04:15 +02:00

businessDocsStoragePath.test.js

fix(storage): write business documents under STORAGE_PATH, not the cwd (#1070)

2026-08-18 22:14:41 +02:00

chunkedUploadFilename.test.js

fix(security): sanitize chunked-upload filename (GHSA-pc72-jf53-w28j)

2026-07-16 10:55:10 +02:00

chunkedUploadSizeCap.test.js

fix(upload): enforce the chunked-upload cap on bytes received, not declared

2026-09-02 09:33:34 +02:00

contractService.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

customerAccountsService.passive.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

customerHoursService.test.js

feat(hours): install-wide default rate + inline missing-rate CTA

2026-06-02 11:33:45 +02:00

customScriptSanitiser.test.js

feat(analytics): pluggable trackers — Umami + Rybbit + Custom (#663 Phase 1)

2026-06-23 18:11:58 +02:00

downloadFilenameService.test.js

feat(downloads): preserve original camera filenames on download (opt-in) (#493)

2026-05-14 23:11:00 +02:00

emailIntakeCaps.test.js

fix(security): bound inbound-mail resources, redact secrets from logs (GHSA-2qf9, pgmp, r794) (#959)

2026-08-02 21:17:11 +02:00

emailProcessor.htmlToText.test.js

fix(email): render conditionals, localise password placeholders, fix caller/template variable drift

2026-05-03 22:06:06 +02:00

emailProcessor.safeTemplateReplace.test.js

fix(email): render conditionals, localise password placeholders, fix caller/template variable drift

2026-05-03 22:06:06 +02:00

emailProcessor.secretRedaction.test.js

fix(email): scrub gallery passwords from the sent-mail archive (#1340)

2026-09-07 20:02:57 +02:00

emailWebhookTransport.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

ensureHeroImage.external.test.js

fix(gallery): stop the lightbox loading originals to display a photo (#1166) (#1169)

2026-08-26 08:46:29 +02:00

ensurePreviewImage.external.test.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

environmentUpdateInstructions.test.js

fix(update): target docker-compose.production.yml in dashboard update steps

2026-07-17 20:55:49 +02:00

eventService.calendar.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

expenseService.markup.test.js

fix(accounting): address the-luap PR #636 review

2026-06-18 18:40:11 +02:00

externalMediaWatcher.test.js

feat(external-media): watch reference folders and import new files automatically (#1345)

2026-09-07 22:29:55 +02:00

externalPhotoDedupe.restore.test.js

fix(external-media): one row per external file per event (#1162) (#1167)

2026-08-26 08:28:48 +02:00

feedbackDefaults.test.js

feat(gallery): colour labels for client proofing, and one global default per feedback type (#1044) (#1137)

2026-08-23 11:15:01 +02:00

fileWatcher.concurrency.test.js

fix(file-watcher): bound concurrent photo processing (#846)

2026-07-19 22:00:46 +02:00

fileWatcherReplaceDedupe.test.js

fix(watcher): stop re-importing a photo whose file was replaced (#1226) (#1237)

2026-08-29 12:22:50 +02:00

fontsService.test.js

test(fonts): fix mock bypass and case-insensitive FS skip (#390 follow-up)

2026-05-04 23:26:25 +02:00

generatePreviewImage.formats.test.js

fix(previews): preserve alpha and animation in the preview tier (#1171)

2026-08-26 08:53:05 +02:00

generateThumbnail.regenerate.test.js

fix(thumbnails): regenerate external photos instead of dropping their tiers (#1129)

2026-08-22 21:37:49 +02:00

imageProcessor.sharpConfig.test.js

fix(file-watcher): bound concurrent photo processing (#846)

2026-07-19 22:00:46 +02:00

imageProcessor.singleFlight.test.js

fix(images): single-flight lazy rendition generation and keep the old rendition during replacement (#1350)

2026-09-08 08:33:04 +02:00

imageProcessorOrientation.test.js

fix(images): respect EXIF orientation in thumbnails, heroes and previews (#1194)

2026-08-26 20:55:54 +02:00

imageProcessorRaw.test.js

feat(uploads): DNG / camera-RAW support via embedded-preview extraction (#821)

2026-07-17 21:51:21 +02:00

invoiceService.hierarchy.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

invoiceService.installmentPlan.test.js

test: extend documentSequences mock for shared nextDocumentNumber

2026-07-03 07:27:43 +02:00

invoiceService.locks.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

invoiceService.smoke.test.js

test: add smoke tests for invoiceService, adminEvents routes, backupService

2026-07-03 07:49:45 +02:00

ledgerService.test.js

fix(accounting): Banana I&E export uses the 'Category' column (not 'ContraAccount')

2026-06-15 23:17:57 +02:00

lightroomRoundtrip.test.js

test(external): make the fold-collision guard test the real code (#745 follow-up) (#1234)

2026-08-29 12:15:31 +02:00

localStorageUsage.test.js

fix(admin): make "Storage used" report storage used (#1164) (#1170)

2026-08-26 08:53:39 +02:00

logActivityTrx.test.js

fix(crm): pass trx to logActivity inside transactions — audit rows silently lost on SQLite (#851)

2026-07-19 22:36:52 +02:00

mfaService.test.js

test(auth): MFA unit + route + CLI coverage (39 tests)

2026-07-03 11:37:51 +02:00

newsletterService.sanitize.test.js

fix(security): re-check inline CSS after template substitution

2026-09-05 15:21:40 +02:00

pdfService.baseDocument.test.js

feat(invoices): configurable VAT/free-text note + fix multi-page page-number overlap (#794)

2026-07-11 02:01:20 +02:00

pdfService.helpers.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

photoAdminMarks.test.js

feat(gallery): colour labels for client proofing, and one global default per feedback type (#1044) (#1137)

2026-08-23 11:15:01 +02:00

photoAdminMarksRowVanishes.test.js

fix(gallery): guest filters respect show_feedback_to_guests, and marks survive a mid-write clear (#1147)

2026-08-23 22:07:50 +02:00

photoExportService.cameraName.test.js

fix(export): name the camera master in photo exports, not the delivered render (#1229) (#1230)

2026-08-29 11:10:05 +02:00

photoExportService.txt.test.js

fix(admin/exports): Lightroom TXT export joins with comma + drops extension (#623)

2026-06-17 22:25:12 +02:00

photoProcessor.processPhoto.test.js

fix(images): respect EXIF orientation in thumbnails, heroes and previews (#1194)

2026-08-26 20:55:54 +02:00

photoResolver.test.js

fix(external-media): store external paths from the media root (#1163) (#1168)

2026-08-26 08:36:45 +02:00

picpeakReinjectAdmin.test.js

fix(security): harden .picpeak restore operator-preservation (GHSA-qxfx follow-up)

2026-07-16 12:27:59 +02:00

picpeakRolePreserve.test.js

feat(security): harden .picpeak restore robustness — sessions, roles, sequences

2026-07-16 12:56:34 +02:00

previewTierKeys.formats.test.js

fix(images): probe and clean up preview tiers under the extension the encoder actually wrote (#1355)

2026-09-08 08:41:53 +02:00

projectDealLineageOwnership.test.js

fix(security): vet the destination project when linking a deal (#991)

2026-08-04 16:36:12 +02:00

projectOverviewEmailCanAct.test.js

fix(projects): stop the cockpit offering email controls the API rejects (#976)

2026-08-03 14:48:50 +02:00

publicSiteBrandTokens.test.js

fix(security): escape brand tokens, block tracker redirects, trim logo diagnostic (GHSA-j347, mw76, 29vm) (#961)

2026-08-02 21:17:17 +02:00

quoteService.hierarchy.test.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

quoteService.locks.test.js

fix(quotes): enforce the status state machine, and correct the table

2026-09-02 09:43:10 +02:00

rasterizePageCap.test.js

test(accounting): cover export scope, unique-violation detector, PDF page cap

2026-06-16 18:54:55 +02:00

rebillProofName.test.js

feat(accounting): re-bill proof attachment, CRM panel & hours↔re-bills cross-add (#979)

2026-08-03 22:03:31 +02:00

restoreService.sqliteRestorePathSafety.test.js

fix(backend): contain and sanitize the SQLite restore source path

2026-09-10 20:42:38 +02:00

rybbitAdapter.test.js

feat(analytics): pluggable trackers — Umami + Rybbit + Custom (#663 Phase 1)

2026-06-23 18:11:58 +02:00

scheduledTask.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

secureImageService.lifecycle.test.js

fix: enforce gallery access and consolidate gallery workflows (#1357)

2026-09-08 15:34:09 +02:00

taxReportPdf.test.js

test(accounting): update tax-report CSV tests for the unified ledger format

2026-06-15 19:54:18 +02:00

taxReportService.test.js

fix(accounting): tax-report storno totals + hours-line date on Postgres

2026-06-18 18:40:22 +02:00

trackerFactory.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

transferOwnership.test.js

test(transfers): pin the PicTransfer ownership guards (#1006)

2026-08-10 08:10:54 +02:00

transferService.gating.test.js

feat(transfers): add PicTransfer — cross-event file transfers (#998)

2026-08-09 13:40:03 +02:00

umamiAdapter.test.js

feat(analytics): pluggable trackers — Umami + Rybbit + Custom (#663 Phase 1)

2026-06-23 18:11:58 +02:00

updateCheckRegistryMigration.test.js

feat(admin): surface the registry move through the update check (#993)

2026-08-04 16:36:50 +02:00

updateCheckService.getReleasesSince.test.js

chore: migrate Docker registry + GitHub URLs to PicPeak org

2026-06-29 20:20:13 +02:00

uploadSettingsFileTypes.test.js

test(uploads): harden frontend map parser, drop dead getSafeFilename edit (codex review of #834)

2026-07-18 23:46:40 +02:00

uploadSettingsMaxFileSize.test.js

fix(upload): scope category ids, stop temp-file leaks, split the video cap

2026-09-02 09:43:10 +02:00

usageCoverageInventory.test.js

feat(usage): distinguish real edits and template delivery with v5 consent (#1339)

2026-09-07 20:03:15 +02:00

usageEnableDisableRace.test.js

feat(usage): prompt existing admins once for usage reporting after an update

2026-09-08 16:25:51 +02:00

usageExportReceipt.test.js

feat(usage): prompt existing admins once for usage reporting after an update

2026-09-08 16:25:51 +02:00

usageIngressCompatibility.test.js

feat(usage): distinguish real edits and template delivery with v5 consent (#1339)

2026-09-07 20:03:15 +02:00

usageOutboundOnly.test.js

feat(usage): distinguish real edits and template delivery with v5 consent (#1339)

2026-09-07 20:03:15 +02:00

usageServiceKeyRotation.test.js

feat(usage): prompt existing admins once for usage reporting after an update

2026-09-08 16:25:51 +02:00

usageSnapshotSignals.test.js

feat(usage): prompt existing admins once for usage reporting after an update

2026-09-08 16:25:51 +02:00

usageTemplateDelivery.test.js

feat(usage): distinguish real edits and template delivery with v5 consent (#1339)

2026-09-07 20:03:15 +02:00

usageV3.test.js

fix(usage): introduce consented v4 without changing historical reports

2026-09-06 21:34:04 +02:00

userManagementService.activateDelete.test.js

fix(tests): raise migration-boot hook timeout pins to the 120s default (#900)

2026-07-29 12:38:26 +02:00

videoPlaceholderNoDbLookup.test.js

fix(video): try metadata extraction and thumbnail generation independently (#1371)

2026-09-10 13:48:48 +02:00

workerShutdown.test.js

fix: interrupt idle worker waits during shutdown

2026-09-08 15:54:01 +02:00