v3.2.81

New security documentation

We have published new documentation about the FileUpload's preserveFilenames() and getUploadedFileNameForStorageUsing() methods, appropriate for anyone using a local or public filesystem disk with untrusted users. Please read it and take appropriate action to ensure that your application is not vulnerable to this type of attack:

https://filamentphp.com/docs/3.x/forms/fields/file-upload#security-implications-of-controlling-file-names

Credit to @angelej for investigating this issue and giving us a heads up about the implications.

What's Changed

• Docs: Added static to example Importer::getColumns() method by @lukeholder in #12835
• feat: add support to override media model on spatie media file upload by @WayneHarris in #12829
• Feat: Adding grouping direction hidden method for the table grouping by @bensondevs in #12826
• Feature: Added the option to modals to prevent closing on escape key press by @borjajimnz in #12832
• Fix: Missing Tenant Registration, Profile and User Profile page component registration by @dev-idkwhoami in #12844
• lang: Add unsaved-changes-alert id translation by @NathanaelGT in #12866
• Improve Stats Overview Widgets documentation by @xikcode in #12862
• Fix: Incorrectly hiding the 'Select all X' table link by @dev-idkwhoami in #12853
• Fix: Hide toggleable hidden column in column toggle dropdown by @dev-idkwhoami in #12854
• Fix: Visual bug when using selectCurrentPageOnly in combination with grouping by @dev-idkwhoami in #12860

New Contributors

• @lukeholder made their first contribution in #12835
• @bensondevs made their first contribution in #12826
• @xikcode made their first contribution in #12862

Full Changelog: v3.2.80...v3.2.81