@@ -1680,6 +1680,10 @@ api/src/utils/translations-shared.test.ts
16801680src/utils/translations-shared.test.ts
16811681utils/translations-shared.test.ts
16821682translations-shared.test.ts
1683+ api/src/utils/get-host-from-req.ts
1684+ src/utils/get-host-from-req.ts
1685+ utils/get-host-from-req.ts
1686+ get-host-from-req.ts
16831687api/src/utils/get-string-byte-size.ts
16841688src/utils/get-string-byte-size.ts
16851689utils/get-string-byte-size.ts
@@ -2387,6 +2391,12 @@ api/src/services/deployment-runs.ts
23872391src/services/deployment-runs.ts
23882392services/deployment-runs.ts
23892393deployment-runs.ts
2394+ api/src/services/files/lib/assert-valid-storage-path.ts
2395+ src/services/files/lib/assert-valid-storage-path.ts
2396+ services/files/lib/assert-valid-storage-path.ts
2397+ files/lib/assert-valid-storage-path.ts
2398+ lib/assert-valid-storage-path.ts
2399+ assert-valid-storage-path.ts
23902400api/src/services/files/lib/get-sharp-instance.test.ts
23912401src/services/files/lib/get-sharp-instance.test.ts
23922402services/files/lib/get-sharp-instance.test.ts
@@ -2399,12 +2409,36 @@ services/files/lib/extract-metadata.ts
23992409files/lib/extract-metadata.ts
24002410lib/extract-metadata.ts
24012411extract-metadata.ts
2412+ api/src/services/files/lib/sanitize-filepath.test.ts
2413+ src/services/files/lib/sanitize-filepath.test.ts
2414+ services/files/lib/sanitize-filepath.test.ts
2415+ files/lib/sanitize-filepath.test.ts
2416+ lib/sanitize-filepath.test.ts
2417+ sanitize-filepath.test.ts
2418+ api/src/services/files/lib/assert-unique-filename.ts
2419+ src/services/files/lib/assert-unique-filename.ts
2420+ services/files/lib/assert-unique-filename.ts
2421+ files/lib/assert-unique-filename.ts
2422+ lib/assert-unique-filename.ts
2423+ assert-unique-filename.ts
24022424api/src/services/files/lib/get-sharp-instance.ts
24032425src/services/files/lib/get-sharp-instance.ts
24042426services/files/lib/get-sharp-instance.ts
24052427files/lib/get-sharp-instance.ts
24062428lib/get-sharp-instance.ts
24072429get-sharp-instance.ts
2430+ api/src/services/files/lib/sanitize-filepath.ts
2431+ src/services/files/lib/sanitize-filepath.ts
2432+ services/files/lib/sanitize-filepath.ts
2433+ files/lib/sanitize-filepath.ts
2434+ lib/sanitize-filepath.ts
2435+ sanitize-filepath.ts
2436+ api/src/services/files/lib/assert-valid-storage-path.test.ts
2437+ src/services/files/lib/assert-valid-storage-path.test.ts
2438+ services/files/lib/assert-valid-storage-path.test.ts
2439+ files/lib/assert-valid-storage-path.test.ts
2440+ lib/assert-valid-storage-path.test.ts
2441+ assert-valid-storage-path.test.ts
24082442api/src/services/files/utils/get-metadata.test.ts
24092443src/services/files/utils/get-metadata.test.ts
24102444services/files/utils/get-metadata.test.ts
@@ -2539,6 +2573,11 @@ services/tus/utils/wait-timeout.ts
25392573tus/utils/wait-timeout.ts
25402574utils/wait-timeout.ts
25412575wait-timeout.ts
2576+ api/src/services/tus/data-store.test.ts
2577+ src/services/tus/data-store.test.ts
2578+ services/tus/data-store.test.ts
2579+ tus/data-store.test.ts
2580+ data-store.test.ts
25422581api/src/services/tus/server.ts
25432582src/services/tus/server.ts
25442583services/tus/server.ts
@@ -5552,6 +5591,11 @@ src/websocket/controllers/base.ts
55525591websocket/controllers/base.ts
55535592controllers/base.ts
55545593base.ts
5594+ api/src/websocket/controllers/base.test.ts
5595+ src/websocket/controllers/base.test.ts
5596+ websocket/controllers/base.test.ts
5597+ controllers/base.test.ts
5598+ base.test.ts
55555599api/src/websocket/controllers/hooks.ts
55565600src/websocket/controllers/hooks.ts
55575601websocket/controllers/hooks.ts
@@ -5562,6 +5606,11 @@ src/websocket/controllers/graphql.ts
55625606websocket/controllers/graphql.ts
55635607controllers/graphql.ts
55645608graphql.ts
5609+ api/src/websocket/controllers/graphql.test.ts
5610+ src/websocket/controllers/graphql.test.ts
5611+ websocket/controllers/graphql.test.ts
5612+ controllers/graphql.test.ts
5613+ graphql.test.ts
55655614api/src/websocket/controllers/rest.ts
55665615src/websocket/controllers/rest.ts
55675616websocket/controllers/rest.ts
@@ -5749,6 +5798,11 @@ src/websocket/utils/wait-for-message.test.ts
57495798websocket/utils/wait-for-message.test.ts
57505799utils/wait-for-message.test.ts
57515800wait-for-message.test.ts
5801+ api/src/websocket/utils/is-origin-allowed.ts
5802+ src/websocket/utils/is-origin-allowed.ts
5803+ websocket/utils/is-origin-allowed.ts
5804+ utils/is-origin-allowed.ts
5805+ is-origin-allowed.ts
57525806api/src/websocket/utils/message.test.ts
57535807src/websocket/utils/message.test.ts
57545808websocket/utils/message.test.ts
@@ -5759,6 +5813,11 @@ src/websocket/utils/get-expires-at-for-token.ts
57595813websocket/utils/get-expires-at-for-token.ts
57605814utils/get-expires-at-for-token.ts
57615815get-expires-at-for-token.ts
5816+ api/src/websocket/utils/is-origin-allowed.test.ts
5817+ src/websocket/utils/is-origin-allowed.test.ts
5818+ websocket/utils/is-origin-allowed.test.ts
5819+ utils/is-origin-allowed.test.ts
5820+ is-origin-allowed.test.ts
57625821api/src/websocket/utils/items.ts
57635822src/websocket/utils/items.ts
57645823websocket/utils/items.ts
@@ -7934,6 +7993,10 @@ app/src/utils/localized-format-distance-strict.ts
79347993src/utils/localized-format-distance-strict.ts
79357994utils/localized-format-distance-strict.ts
79367995localized-format-distance-strict.ts
7996+ app/src/utils/get-with-array-index.test.ts
7997+ src/utils/get-with-array-index.test.ts
7998+ utils/get-with-array-index.test.ts
7999+ get-with-array-index.test.ts
79378000app/src/utils/point-on-line.ts
79388001src/utils/point-on-line.ts
79398002utils/point-on-line.ts
@@ -8177,6 +8240,10 @@ app/src/utils/format-field-function.ts
81778240src/utils/format-field-function.ts
81788241utils/format-field-function.ts
81798242format-field-function.ts
8243+ app/src/utils/generate-favicon.test.ts
8244+ src/utils/generate-favicon.test.ts
8245+ utils/generate-favicon.test.ts
8246+ generate-favicon.test.ts
81808247app/src/utils/add-query-to-path.ts
81818248src/utils/add-query-to-path.ts
81828249utils/add-query-to-path.ts
@@ -8337,6 +8404,10 @@ app/src/utils/get-date-fns-locale.ts
83378404src/utils/get-date-fns-locale.ts
83388405utils/get-date-fns-locale.ts
83398406get-date-fns-locale.ts
8407+ app/src/utils/get-with-array-index.ts
8408+ src/utils/get-with-array-index.ts
8409+ utils/get-with-array-index.ts
8410+ get-with-array-index.ts
83408411app/src/utils/remove-query-from-path.test.ts
83418412src/utils/remove-query-from-path.test.ts
83428413utils/remove-query-from-path.test.ts
@@ -8851,6 +8922,10 @@ app/src/composables/use-system.ts
88518922src/composables/use-system.ts
88528923composables/use-system.ts
88538924use-system.ts
8925+ app/src/composables/use-template-data.test.ts
8926+ src/composables/use-template-data.test.ts
8927+ composables/use-template-data.test.ts
8928+ use-template-data.test.ts
88548929app/src/composables/use-safe-redirect.ts
88558930src/composables/use-safe-redirect.ts
88568931composables/use-safe-redirect.ts
@@ -20244,22 +20319,40 @@ crowdin.yml
2024420319cms-2720-foreground-overlay-shader.md
2024520320.changeset/yellow-cougars-laugh.md
2024620321yellow-cougars-laugh.md
20322+ .changeset/famous-boats-relate.md
20323+ famous-boats-relate.md
2024720324.changeset/fix-pg-value-too-long-field.md
2024820325fix-pg-value-too-long-field.md
20326+ .changeset/vast-cases-fetch.md
20327+ vast-cases-fetch.md
20328+ .changeset/three-dragons-flow.md
20329+ three-dragons-flow.md
2024920330.changeset/floppy-keys-relax.md
2025020331floppy-keys-relax.md
20332+ .changeset/fix-lfi-path-traversal.md
20333+ fix-lfi-path-traversal.md
2025120334.changeset/curvy-mammals-strive.md
2025220335curvy-mammals-strive.md
20336+ .changeset/thick-bees-juggle.md
20337+ thick-bees-juggle.md
2025320338.changeset/config.json
2025420339config.json
20340+ .changeset/back-button-relational-traversal.md
20341+ back-button-relational-traversal.md
2025520342.changeset/ssrf-embedded-ipv4-blocklist.md
2025620343ssrf-embedded-ipv4-blocklist.md
20344+ .changeset/preview-url-array-indexing.md
20345+ preview-url-array-indexing.md
2025720346.changeset/red-suns-reply.md
2025820347red-suns-reply.md
2025920348.changeset/calm-years-wave.md
2026020349calm-years-wave.md
2026120350.changeset/many-papers-decide.md
2026220351many-papers-decide.md
20352+ .changeset/quick-foxes-shine.md
20353+ quick-foxes-shine.md
20354+ .changeset/ready-feet-try.md
20355+ ready-feet-try.md
2026320356.changeset/slick-colts-work.md
2026420357slick-colts-work.md
2026520358.changeset/dry-pillows-hope.md
@@ -20268,6 +20361,8 @@ dry-pillows-hope.md
2026820361mcp-files-update-data-schema.md
2026920362.changeset/full-trees-type.md
2027020363full-trees-type.md
20364+ .changeset/funny-ends-sleep.md
20365+ funny-ends-sleep.md
2027120366.changeset/common-plums-sneeze.md
2027220367common-plums-sneeze.md
2027320368contributing.md
@@ -20716,13 +20811,6 @@ db/routes/items/json-fields.md
2071620811routes/items/json-fields.md
2071720812items/json-fields.md
2071820813json-fields.md
20719- tests/blackbox/tests/db/routes/files/tus.test.ts
20720- blackbox/tests/db/routes/files/tus.test.ts
20721- tests/db/routes/files/tus.test.ts
20722- db/routes/files/tus.test.ts
20723- routes/files/tus.test.ts
20724- files/tus.test.ts
20725- tus.test.ts
2072620814tests/blackbox/tests/db/routes/files/storage.test.ts
2072720815blackbox/tests/db/routes/files/storage.test.ts
2072820816tests/db/routes/files/storage.test.ts
@@ -21335,6 +21423,12 @@ tests/endpoints/assets/img_format_webp.webp
2133521423endpoints/assets/img_format_webp.webp
2133621424assets/img_format_webp.webp
2133721425img_format_webp.webp
21426+ tests/e2e/tests/endpoints/files/files.sb.test.ts
21427+ e2e/tests/endpoints/files/files.sb.test.ts
21428+ tests/endpoints/files/files.sb.test.ts
21429+ endpoints/files/files.sb.test.ts
21430+ files/files.sb.test.ts
21431+ files.sb.test.ts
2133821432tests/e2e/tests/endpoints/files/files.test.ts
2133921433e2e/tests/endpoints/files/files.test.ts
2134021434tests/endpoints/files/files.test.ts
@@ -21347,6 +21441,12 @@ tests/endpoints/files/old.test.ts
2134721441endpoints/files/old.test.ts
2134821442files/old.test.ts
2134921443old.test.ts
21444+ tests/e2e/tests/endpoints/files/filename-disk.test.ts
21445+ e2e/tests/endpoints/files/filename-disk.test.ts
21446+ tests/endpoints/files/filename-disk.test.ts
21447+ endpoints/files/filename-disk.test.ts
21448+ files/filename-disk.test.ts
21449+ filename-disk.test.ts
2135021450tests/e2e/tests/endpoints/server/health.test.ts
2135121451e2e/tests/endpoints/server/health.test.ts
2135221452tests/endpoints/server/health.test.ts
@@ -21593,6 +21693,11 @@ e2e/tests/websockets/schema.d.ts
2159321693tests/websockets/schema.d.ts
2159421694websockets/schema.d.ts
2159521695schema.d.ts
21696+ tests/e2e/tests/websockets/public-auth-failure.sb.test.ts
21697+ e2e/tests/websockets/public-auth-failure.sb.test.ts
21698+ tests/websockets/public-auth-failure.sb.test.ts
21699+ websockets/public-auth-failure.sb.test.ts
21700+ public-auth-failure.sb.test.ts
2159621701tests/e2e/tests/permissions/mcp-oauth-rest.test.ts
2159721702e2e/tests/permissions/mcp-oauth-rest.test.ts
2159821703tests/permissions/mcp-oauth-rest.test.ts
0 commit comments