JonCSykes
a765d342e0
Merge remote-tracking branch 'origin/feature/upload-company-logo' into feature/upload-company-logo
...
# Conflicts:
# pnpm-lock.yaml
# server/package.json
2026-03-07 13:36:41 -05:00
JonCSykes
4dffdc4de2
Merge master into feature/upload-company-logo
2026-03-07 12:58:02 -05:00
JonCSykes
f44efce265
Add @types/node as a devDependency in cursor-local package
2026-03-06 23:15:45 -05:00
JonCSykes
6f16fc0a93
Merge remote-tracking branch 'origin/master' into feature/upload-company-logo
2026-03-06 22:55:25 -05:00
JonCSykes
4599fc5a8d
Merge remote-tracking branch 'origin/master' into feature/upload-company-logo
2026-03-06 17:21:06 -05:00
JonCSykes
a4702e48f9
Add sanitization for SVG uploads and enhance security headers for asset responses
...
- Introduced SVG sanitization using `dompurify` to prevent malicious content.
- Updated tests to validate SVG sanitization with various scenarios.
- Enhanced response headers for assets, adding CSP and nosniff for SVGs.
- Adjusted UI to better clarify supported file types for logo uploads.
- Updated dependencies to include `jsdom` and `dompurify`.
2026-03-06 17:18:43 -05:00
JonCSykes
1448b55ca4
Improve error handling in CompanySettings for mutation failure messages.
2026-03-06 16:47:04 -05:00
JonCSykes
b19d0b6f3b
Add support for company logos, including schema adjustments, validation, assets handling, and UI display enhancements.
2026-03-06 16:39:35 -05:00
JonCSykes