RushLana 2357a86d51 Fixes #2552 - Implement SVG validation ...

Use https://github.com/darylldoyle/svg-sanitizer to check for malicious code inside svg, throw an error code 415 when triggered in the API.

2026-05-26 14:26:39 +02:00

..

include

Fixes #2552 - Implement SVG validation

2026-05-26 14:26:39 +02:00

themes

fixes #2555 toggle password links by user status

2026-04-29 16:20:37 +02:00

album_notification.php

fixes #2519 prevent CSRF on album notification form

2026-02-04 15:49:47 +01:00

album.php

issue #2073 add raw_name in tags property

2023-12-22 10:20:49 +01:00

albums.php

fixes #2209 high-volume optimization

2024-08-23 17:50:02 +02:00

batch_manager_global.php

fixes #2316 improve album selector validation and keyboard interaction

2025-01-27 16:08:32 +01:00

batch_manager_unit.php

fixes #2454 remove useless variables

2025-11-21 18:04:21 +01:00

batch_manager.php

fixes GHSA-7r67-9xhq-7p2c check get.filter inputs for dimensions and filesize

2026-04-26 13:06:52 +02:00

cat_list.php

issue #2405 update smarty

2025-09-17 12:05:48 +02:00

cat_modify.php

issue #2405 update smarty

2025-09-17 12:05:48 +02:00

cat_options.php

related to #1679 More accurate title for album properties

2022-06-28 11:32:28 +02:00

cat_perm.php

fixes #2306 move save buttons to bottom of page (PR #2346)

2025-03-21 16:28:37 +01:00

comments.php

fixes #2364 redesign admin comments management

2025-08-26 14:35:31 +02:00

configuration.php

fixes #2531 remove use_standard_pages from config.php

2026-02-26 14:36:08 +01:00

element_set_ranks.php

fixes GHSA-jhp4-7f82-8f6q check image_order against allowed values

2026-04-26 15:18:28 +02:00

extend_for_templates.php

fixes #1930 remove search_rules

2023-06-27 15:20:41 +02:00

group_list.php

issue #2386 fix activity link in admin group list

2025-08-11 15:23:12 +02:00

group_perm.php

…

help.php

fixes #2210 add links to the new documentation in help pages

2024-08-26 13:55:44 +02:00

history.php

related to #1876 Simplified regex for ip filter

2023-03-01 13:53:54 +01:00

index.php

…

intro.php

fixes #2550 checks MIME type against each uploaded file

2026-04-21 16:39:04 +02:00

languages_installed.php

issue #1852 also forbid extension deletion

2023-01-25 15:18:45 +01:00

languages_new.php

issue #1852 ability to disable core/extensions updates

2023-01-21 11:54:51 +01:00

languages.php

related to #1679 Good title for Updates tabs called in different parts of admin

2022-06-28 13:00:17 +02:00

maintenance_actions.php

fixes #2361 explicit action to empty lounge

2025-09-19 16:49:14 +02:00

maintenance_env.php

Add a more granular container detection (#2501)

2026-01-14 13:00:14 +01:00

maintenance_sys.php

fixes #2259 order by activity_id instead of occured_on

2024-10-30 10:43:50 +01:00

maintenance.php

fixes #2361 explicit action to empty lounge

2025-09-19 16:49:14 +02:00

menubar.php

fixes #2306 move save buttons to bottom of page (PR #2346)

2025-03-21 16:28:37 +01:00

notification_by_mail.php

fixes #2306 move save buttons to bottom of page (PR #2346)

2025-03-21 16:28:37 +01:00

permalinks.php

fixes #1910 prevent SQL injection

2023-05-05 10:23:47 +02:00

photo.php

related to #1795 removed useless translation func call

2022-11-16 15:45:49 +01:00

photos_add_applications.php

related to #1679 fixing glitches on page titles

2022-07-05 14:13:30 +02:00

photos_add_direct.php

fixes #2550 checks MIME type against each uploaded file

2026-04-21 16:39:04 +02:00

photos_add_ftp.php

related to #1679 fixing glitches on page titles

2022-07-05 14:13:30 +02:00

photos_add.php

…

picture_coi.php

…

picture_formats.php

Minor change on formats tab

2022-07-30 14:12:15 +02:00

picture_modify.php

fixes #2433 protect picture_modify.php from HTML just like pwg.images.setInfo

2025-11-10 16:04:51 +01:00

plugin.php

Correction for PHP Deprecated: explode()

2024-03-27 14:43:35 +01:00

plugins_installed.php

fixes #2290 add user's language prefix to the PEM link

2024-12-05 15:04:50 +01:00

plugins_new.php

fixes GHSA-qg85-957m-7vgg providing plugin_id in URL is useless since Piwigo 12

2023-10-06 15:13:04 +02:00

plugins.php

related to #1679 Good title for Updates tabs called in different parts of admin

2022-06-28 13:00:17 +02:00

popuphelp.php

issue #2001 set useless but required template variables in popuphelp

2023-09-29 18:17:23 +02:00

profile.php

fixes #1911 check url input parameter

2023-05-05 09:53:01 +02:00

rating_user.php

related to #1679 fixing glitches on page titles

2022-07-05 14:13:30 +02:00

rating.php

related to #1679 fixing glitches on page titles

2022-07-05 14:13:30 +02:00

site_manager.php

related to #1679 changed title for Sync tabs

2022-06-28 13:34:42 +02:00

site_reader_local.php

…

site_update.php

fixes #2306 move save buttons to bottom of page (PR #2346)

2025-03-21 16:28:37 +01:00

stats.php

fixes #1291 change syntax to keep compatibility with PHP 5.3 (for now)

2021-01-21 11:01:18 +01:00

tags.php

issue #2073 add raw_name in tags property

2023-12-22 10:20:49 +01:00

theme.php

…

themes_installed.php

fixes #2345 create piwigo standard pages

2025-03-18 16:46:41 +01:00

themes_new.php

issue #1852 ability to disable core/extensions updates

2023-01-21 11:54:51 +01:00

themes_standard_pages.php

fixes GHSA-7w97-5g4p-xqvv more robust check on logo file type

2026-04-26 11:42:20 +02:00

themes.php

related to #1679 Good title for Updates tabs called in different parts of admin

2022-06-28 13:00:17 +02:00

updates_ext.php

fixes #2388 hide update actions for dev mode extensions

2025-07-07 09:53:48 +02:00

updates_pwg.php

Add docker updates support

2026-02-24 15:16:56 +01:00

updates.php

issue #1852 ability to disable core/extensions updates

2023-01-21 11:54:51 +01:00

user_activity.php

issue #2386 simplify/secure additional filters

2025-08-12 16:20:25 +02:00

user_list.php

fixes #2430 use configurable user_fields in sql query

2025-11-02 13:48:40 +01:00

user_perm.php

…