Skip to content

Fix(core):Fix missing rights checks and unescaped output in order/reception forms - #599

Merged
RomainLvr merged 1 commit into
mainfrom
some_fix
Sep 4, 2026
Merged

Fix(core):Fix missing rights checks and unescaped output in order/reception forms#599
RomainLvr merged 1 commit into
mainfrom
some_fix

Conversation

@stonebuzz

Copy link
Copy Markdown
Contributor

Checklist before requesting a review

Please delete options that are not relevant.

  • I have performed a self-review of my code.
  • I have added tests (when available) that prove my fix is effective or that my feature works.
  • I have updated the CHANGELOG with a short functional description of the fix or new feature.
  • This change requires a documentation update.

Description

Several order and reception mutation actions (item add/update/delete, status changes, bulk reception) were missing the right/entity check that other actions in the same controllers already perform.

Also fixed several escaping text fields escaping

Screenshots (if appropriate):

@stonebuzz
stonebuzz force-pushed the some_fix branch 5 times, most recently from 146a555 to 9eba540 Compare September 4, 2026 12:08
@RomainLvr
RomainLvr merged commit 80ca90d into main Sep 4, 2026
3 checks passed
@RomainLvr
RomainLvr deleted the some_fix branch September 4, 2026 12:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants