25 Commits (d4c7a22fa2ff12c69c64f7c6c322d8d51d480e6b)

Author	SHA1	Message	Date
Wabo	977a98a5da	Sync to upstream 3.0.2 — integrate 28 upstream commits with WaboSign rebrand	3 weeks ago
Wabo	dca4a705ce	Merge upstream/master (tag 3.0.1) via sync/upstream-3.0.1 ... Upstream highlights (17 commits, DocuSeal 3.0.1): - convert images on upload (JPEG for opaque images, PNG for alpha) - security headers - handle dangerous file extensions - isolate editor nodes - gem updates - image autorotation fix WaboSign conflict resolutions: - Kept per-account branded_product_name() calls throughout PDF generation - Took upstream's smarter image format selection (JPEG/PNG based on alpha) - Kept deleted SaaS-only controllers (newsletters, enquiries, console_redirect) - Kept deleted docs/api/ (intentionally removed in WaboSign 1.0.0) - Took upstream convert-upload custom element for template upload button - Removed vendor/bundle (upstream added in 3.0.1; fork excludes /vendor) - Applied encoding-error fix to bin/rebrand-sync Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	3 weeks ago
Pete Matsyburka	d44b35cf0a	convert images on upload	4 weeks ago
Pete Matsyburka	9e4da5948b	convert images on upload	1 month ago
Pete Matsyburka	a68cc0b689	convert images on upload	1 month ago
Wabo	5433aa4dc3	1.3.1 — address CodeQL alerts from initial scan ... Patch release covering the security findings from the repo's first CodeQL scan against 1.3.0: - Sanitise params[:path] before it flows into form action / link href in submissions_filters/_filter_modal (reflected XSS). - Slice required_params to email/phone before passing to find_by! / find_or_initialize_by in start_form_controller (column-name injection via template-owner-controlled link_form_fields preference). - Rewrite FULL_EMAIL_REGEXP local-part to remove the nested quantifier (ReDoS). - Replace the Bearer-token regex in mcp_controller with a string prefix check (polynomial ReDoS). - Swap Math.random()-based attachment UUIDs for crypto.randomUUID() in the submission-form Vue dropzone / signature / initials steps. - Add a workflow-level permissions: read-all block to ci.yml. See CHANGELOG.md [1.3.1] for the full per-alert breakdown and the list of CodeQL findings that are false positives in context. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	1 month ago
Pete Matsyburka	ee65a5693c	improve accessibility	2 months ago
Pete Matsyburka	b4d5a2cad4	dangerous extension error	8 months ago
Pete Matsyburka	20a082ae8e	adjust image field validation	11 months ago
Pete Matsyburka	c5ec7a4b37	image step validation	11 months ago
Alex Turchyn	64d3360e82	add ui classes	1 year ago
Pete Matsyburka	c59c58624b	convert icon to png	1 year ago
Alex Turchyn	18d60f5522	add signing form specs	2 years ago
Pete Matsyburka	377244f948	add form preview	2 years ago
Alex Turchyn	3015c2d156	convert BMP images to PNG before uploading in the signing form	2 years ago
Pete Matsyburka	cab9672d25	remove direct upload	2 years ago
Alex Turchyn	ceb052b158	start translating the form	3 years ago
Alex Turchyn	47c57158f4	refactor and fixes	3 years ago
Alex Turchyn	28290c4635	form builder hints	3 years ago
Alex Turchyn	97b3adf91f	make public storage and direct upload optional	3 years ago
Alex Turchyn	8bb6ff7ab3	optimize webpack bundles	3 years ago
Alex Turchyn	c9e255f589	add signature verification	3 years ago
Alex Turchyn	fef54859bf	style submitter form	3 years ago
Alex Turchyn	28429c1167	store multiple submitter results	3 years ago
Alex Turchyn	4a303cb423	rename to templates	3 years ago