Release 13 (devel -> main) #35

Merged
ChaoticByte merged 7 commits from devel into main 2022-11-05 09:54:19 +00:00

7 commits

Author SHA1 Message Date
09836176e6 Bumped version to 13 2022-11-05 09:47:18 +01:00
af4dbc74b5 Rename Register Transactions to Transactions in the Admin Panel (#9) 2022-11-05 09:40:41 +01:00
3d778df3d5 Removed feature: register balance (closes #8) 2022-11-05 09:34:13 +01:00
8599f49857 Refactored CSS and HTML templates and polished UI (#10), changed JavaScript variable names to camelCase, adjusted filenames and some url parameter names in urlpatterns, and more. 2022-11-04 20:35:28 +01:00
1e32e2b5dd The application now correctly encodes the url query string for the profile-picture name (for security reasons), removed a left-over print-statement 2022-11-03 20:46:10 +01:00
9f270c12b4 Profile pictures are now handled by the application to mitigate possible directory traversals
to other sub-directories of the static directory (Admins/Staff with the right to edit user
accounts were able to set a path like ../static/favicon.png for the profile picture - this
isn't a "i'm in, now i have root access and can hack your mom"-vulnerability, but better fix
it before it evolves to one. or a dragon. it's too late for this crap.)
2022-11-02 22:53:04 +01:00
86ea7c0000 Added 'supply' page to create negative register transactions, updated translation 2022-10-15 19:37:01 +02:00