John Cardinal 52c85f3aaa Security review pass 5: file handling ...

From code: logo upload accepts any content type and is served inline from the
app's origin (F23); translation import has no role check (F24); attachment and
export gaps (F25). F21 extended to the log and backup download routes; backup
delete found safe. Review only, no code changes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-23 20:11:05 -07:00

..

build

case 4690 - .NET SDK 10.0.402 on the workstation: standalone and launcher bundle runtime 10.0.13; update-before-release note in BUILD.md

2026-10-23 15:43:55 -07:00

modernization

Security review pass 5: file handling

2026-10-23 20:11:05 -07:00

old-devdocs

case 4690 - preparing project and organizing

2026-10-22 10:31:40 -07:00