picpeak

__tests__

fix(downloads): transliterate accented characters in filename via NFD instead of dropping them (#607 )

2026-06-08 18:05:46 +02:00

appSettings.js

feat(workflows): wire booking document actions (prepare_invoice/contract + send_document)

2026-06-26 23:48:12 +02:00

authSecurity.js

fix: address Shannon security assessment findings (37 vulnerabilities) (#254 )

2026-03-22 12:40:01 +01:00

businessHours.js

feat(email): per-weekday business hours + manual queue flush

2026-06-02 13:00:13 +02:00

cleanupTempUploads.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

clientIp.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

cssSanitizer.js

fix: address Shannon security assessment findings (37 vulnerabilities) (#254 )

2026-03-22 12:40:01 +01:00

dateFormatter.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

dbCompat.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

dbErrors.js

fix(accounting): PR #622 blockers — CSV formula injection + IMAP double-ingest race

2026-06-16 18:21:02 +02:00

documentSequences.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

emailNormalization.js

fix(email): preserve dots + subaddresses across all normalization sites (#574 )

2026-05-29 11:42:25 +02:00

errors.js

feat: Add CSS template system with custom gallery styling support

2026-01-03 08:59:01 +01:00

feedbackValidation.js

feat(feedback): per-guest favorite + like caps with mobile-friendly limit modal (#655 )

2026-06-22 22:02:13 +02:00

filenameSanitizer.js

fix(downloads): transliterate accented characters in filename via NFD instead of dropping them (#607 )

2026-06-08 18:05:46 +02:00

fileSecurityUtils.js

Add comprehensive video support to galleries

2025-11-28 17:53:56 +01:00

formatters.js

fix(email): render conditionals, localise password placeholders, fix caller/template variable drift

2026-05-03 22:06:06 +02:00

frontendUrl.js

feat: draft mode, admin branding, and workflow improvements

2026-04-08 11:42:38 +02:00

iban.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

invoiceRounding.js

feat(invoices): optional sub-cent rounding reconciliation ("Rundung" row)

2026-06-28 15:53:44 +02:00

logger.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

networkValidation.js

fix(security): close BOLA on photo-export + NAT64 SSRF in URL guard

2026-06-19 09:46:19 +02:00

numericHelpers.js

fix(events): NaN from slideshow seed breaks event creation on PostgreSQL

2026-07-03 08:57:48 +02:00

parsers.js

refactor: Phase 1 code consolidation and service layer setup

2026-01-02 10:12:24 +01:00

passwordGenerator.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

passwordValidation.js

fix: address Shannon security assessment findings (37 vulnerabilities) (#254 )

2026-03-22 12:40:01 +01:00

pdfFilename.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

photoFilterBuilder.js

feat: implement 4 new features with bug fixes and refactoring plan

2026-01-02 09:56:19 +01:00

publicTokenGuards.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

rateLimitSecurity.js

fix(security): close cross-event thumbnail leak, bulk-op ownership bypass, + hardening

2026-07-03 10:27:28 +02:00

requestIp.js

fix: address Shannon security assessment findings (37 vulnerabilities) (#254 )

2026-03-22 12:40:01 +01:00

resolveLogoFile.js

fix(pdf): version the logo rasterisation cache so the font fix takes effect

2026-06-03 16:34:38 +02:00

routeHelpers.js

feat: Add CSS template system with custom gallery styling support

2026-01-03 08:59:01 +01:00

safeExec.js

fix(safe-exec): Node 22-compatible stdio + error-bridge for spawnTo/FromFile

2026-05-30 03:26:10 +02:00

safePath.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

schemaCache.js

feat(crm): backend code — services + routes + utilities + tests

2026-05-26 18:18:51 +02:00

shareLinkUtils.js

Add short gallery URL toggle and token support (#38 )

2025-10-15 07:21:09 +02:00

slideshowGlobals.js

perf(slideshow): cache global settings to cut /state DB reads (PR #646 review)

2026-06-21 02:53:34 +02:00

slug.js

refactor(slug): extract shared slugify util + scope adminPhotos category lookup (#525 )

2026-05-18 23:50:35 +02:00

spreadsheetSafe.js

fix(accounting): PR #622 blockers — CSV formula injection + IMAP double-ingest race

2026-06-16 18:21:02 +02:00

sqlSecurity.js

Initial commit - Project start (July 17, 2025)

2025-07-24 16:57:07 +02:00

timingSafe.js

fix(security): close cross-event thumbnail leak, bulk-op ownership bypass, + hardening

2026-07-03 10:27:28 +02:00

tokenRevocation.js

feat(customers): customer portal (#354 ) on top of feature-flags reorg

2026-05-11 00:05:20 +02:00

tokenUtils.js

fix(auth): restore COOKIE_SECURE='auto' default for production

2026-05-11 00:29:04 +02:00

whatsNew.js

fix(whatsnew): decode HTML entities and trim em-dash detail in fallback bullets

2026-06-30 18:39:21 +02:00