Skip to content

v0.1.3 - #164

Merged
areynard13 merged 39 commits into
mainfrom
dev
Oct 26, 2026
Merged

v0.1.3#164
areynard13 merged 39 commits into
mainfrom
dev

Conversation

@areynard13

@areynard13 areynard13 commented Oct 16, 2026 •

Copy link
Copy Markdown
Collaborator

Describe your changes

#147
#149
#154
#151
#109
#101

Issue ticket number and link

#147
#149
#154
#151
#109
#101

Type of change

Please delete options that are not relevant.

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist before requesting a review

  • I have performed a self-review of my code.
  • I have tested that everything runs correctly.
  • I have added the necessary documentation in /docs, if applicable.
  • I have updated the changelog.

areynard13 and others added 30 commits October 14, 2026 15:17
…as-been-created

149 feat   open the project who as been created
Resolve every file, folder and main file path through safeResolve and reject paths escaping the temporary working directory. Also validate the request payload.
The compile endpoint now returns 401 without a session, and only owners and editors can regenerate the project thumbnail.
Store the caller's role at join time and ignore edit, create, rename, delete and set-main events when the role is viewer.
The user ID is now read from the NextAuth JWT during the handshake instead of being trusted from the join-document payload.
…-in-doc

151 bug   apply security explain in doc
Co-authored-by: Claude <noreply@anthropic.com>
…tion

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
…nd origin

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
…stent file names

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>
@areynard13
areynard13 marked this pull request as ready for review October 26, 2026 06:57
@areynard13
areynard13 merged commit 6a61d08 into main Oct 26, 2026
5 checks passed
@areynard13
areynard13 deleted the dev branch October 26, 2026 07:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant