classroomio

Files

T

Rotimi Best 900f5ec129 fix: critical SVG XSS vulnerability in file uploads

- Add comprehensive file type validation to prevent SVG uploads
- Update upload widgets to restrict file types at input level
- Enhanced HTML sanitization to block SVG tags and data URLs
- Create centralized file validation utilities with shared constants
- Add client-side and server-side protection against malicious uploads

Security Impact:
- Prevents stored XSS attacks through malicious SVG profile uploads
- Blocks execution of JavaScript embedded in SVG files
- Enforces whitelist of safe image formats (JPEG, PNG, GIF, WebP)
- Provides defense-in-depth protection across all upload components

Fixes reported vulnerability in profile image upload functionality.

2025-12-03 11:25:00 +01:00

constants

fix: onboarding validation error showing translation key #586 (#593 )

2025-11-01 09:54:19 +01:00

functions

fix: critical SVG XSS vulnerability in file uploads

2025-12-03 11:25:00 +01:00

services

feat: clone course (#582 )

2025-10-29 09:57:29 +01:00

store

fix: redirect to 404 page after user closes welcome modal.