Commit graph

2094 commits

Author SHA1 Message Date
shamoon
cb091665e2
Fix: validate cf integer values within PostgreSQL range (#11666) 2026-01-13 09:36:29 -08:00
shamoon
00bb92e3e1
Fix: support ordering by storage path name (#11661) 2026-01-13 09:36:14 -08:00
shamoon
11ec676909
Fix: propagate metadata override created value (#11659) 2026-01-13 09:36:07 -08:00
shamoon
7c457466b7
Security: prevent path traversal in storage paths 2026-01-13 09:29:48 -08:00
shamoon
078cba4bd1
Fix: allow safe <style> tags in SVG uploads (#11593) 2025-12-12 22:01:56 +00:00
Trenton H
d9a596d67a
Fix: Expanded SVG validation whitelist and additional checks (#11590) 2025-12-12 20:04:04 +00:00
shamoon
a1026f03db
Fix: use request.stream instead of request.content (#11591) 2025-12-12 19:50:14 +00:00
shamoon
d391fdec64
Resolve CodeQL warning 2025-12-12 09:39:56 -08:00
shamoon
9bdbfd362f
Merge commit from fork
* Add safe regex matching with timeouts and validation

* Remove redundant length check

* Remove timeouterror workaround
2025-12-12 09:28:47 -08:00
shamoon
9ba1d93e15
Merge commit from fork
* Uses a custom transport to resolve the slim chance of a DNS rebinding affecting the webhook

* Fix WebhookTransport hostname resolution and validation

* Fix test failures

* Lint

* Keep all internal logic inside WebhookTransport

* Fix test failure

* Update handlers.py

* Update handlers.py

---------

Co-authored-by: Trenton H <797416+stumpylog@users.noreply.github.com>
2025-12-12 09:28:17 -08:00
shamoon
3a1d33225e
Fixhancement: pass ordering to tag children (#11556) 2025-12-12 16:43:16 +00:00
shamoon
3b4d958b97
Performance: avoid unnecessary filename operations on bulk custom field updates (#11558) 2025-12-12 07:50:51 -08:00
shamoon
66d363bdc5
Chore: refactor workflows code (#11563) 2025-12-11 12:13:10 -08:00
shamoon
317f239d09
Fix: pass additional arguments to TagSerializer for permissions (#11576) 2025-12-10 08:38:28 -08:00
shamoon
128c3539d5
Chore: fix set_permissions_for_object type (#11564) 2025-12-10 00:12:40 +00:00
shamoon
8efc998687
Chore: refactor permission checks to use queryset.exists() 2025-12-08 15:53:10 -08:00
shamoon
0c43b50f01
Fix: change async handling of select custom field updates (#11490) 2025-11-30 03:54:15 +00:00
shamoon
27966858fd
Enhancement: add more relative dates, support modified (#11411) 2025-11-19 16:54:24 +00:00
shamoon
cf5ac596ed
Performance: make move files after select custom field change async (#11391) 2025-11-19 15:21:33 +00:00
david-loe
7b175ec1b3
Development: fix correct test delete select option (#11406) 2025-11-18 19:28:52 +00:00
Ed Bardsley
36d45ecf4d
Development: fix unreachable code around assertRaises blocks (#11365)
* tests: general cleanup and fixes for runnning under docker

This now allows tests to be run under a locally built or production
docker image with something like:

  `docker run --rm -v $PWD:/usr/src/paperless --entrypoint=bash paperlessngx/paperless-ngx:latest -c "uv run pytest"`

Specific fixes:
- fix unreachable code around `assertRaises` blocks
- fix `assertInt` typos
- fix `str(e)` vs `str(e.exception)` issues
- skip permission-based checks when root (in a docker container)
- catch `OSError` problems when instantiating `INotify` and
  skip inotify-based tests when it's unavailable.

* Reverts most files to dev while keeping the exception assert fixes

---------

Co-authored-by: Trenton H <797416+stumpylog@users.noreply.github.com>
2025-11-18 18:28:43 +00:00
shamoon
0e5ab7f3e0
Fix: support for custom field ordering w advanced search (#11383) 2025-11-17 20:47:55 +00:00
shamoon
b3d6359afc
Chore: set signal receivers with weak=False 2025-11-17 10:02:32 -08:00
Ed Bardsley
c5ad148dc7
Fix: include BASE_URL when constructing doc_url for workflows (#11360)
---------

Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
2025-11-14 17:45:13 +00:00
shamoon
b12f1e757c
Fixhancement: refactor email attachment logic (#11336) 2025-11-14 17:28:46 +00:00
shamoon
0219df5b67
Fixhancement: trim whitespace for some text searches (#11357) 2025-11-14 08:09:09 -08:00
shamoon
44f0191bfb
Fix: only cache remote version for version checking (#11320) 2025-11-09 00:34:46 +00:00
shamoon
e9f846ca24
Fix: include replace none logic in storage path preview, improve jinja conditionals for empty metadata (#11315) 2025-11-08 13:31:57 -08:00
shamoon
2a9d1fce0d
Chore: include password validation on user edit (#11308) 2025-11-07 11:20:27 -08:00
shamoon
a9dfe8f3f7
Fix: use original_file when attaching docs to workflow emails with added trigger (#11266) 2025-11-03 08:42:29 -08:00
shamoon
ad45e3f747
Fix: respect fields parameter for created field (#11251) 2025-11-01 13:13:39 -07:00
shamoon
a0d3527d20
Fixhancement: truncate large logs, improve auto-scroll (#11239) 2025-11-01 07:49:52 -07:00
shamoon
b9aced07fb
Chore: cache Github version check for 15 minutes (#11235) 2025-10-30 13:53:30 -07:00
shamoon
b60fb8ed82
Fix: remove unnecessary permission requirements for new email endpoint (#11215) 2025-10-29 07:14:51 -07:00
shamoon
d718d7d29f
Fix: add root tag filtering for tag list page consistency, fix toggle all (#11208) 2025-10-28 11:04:22 -07:00
shamoon
35bc673648
Update workflows.py 2025-10-27 21:09:19 -07:00
shamoon
d0bd111eab
Change: make workflowrun a softdeletemodel (#11194) 2025-10-27 20:51:39 +00:00
Trenton H
cd81f750b4
Chore: Minor migration optimization for workflow titles (#11197)
* Makes the migration just a little more efficient

* Do it in batches, just in case

* Fixes the model klass name
2025-10-27 13:24:57 -07:00
shamoon
48d21da13b
Fix: support ConsumableDocument in email attachments (#11196) 2025-10-27 10:37:57 -07:00
shamoon
63dab0ab09
Change: restrict superuser modifications to superusers only 2025-10-24 16:25:59 -07:00
shamoon
a11a2ec13f
Fix: resolve migration warning in 2.19.2 (#11157) 2025-10-23 15:29:49 -07:00
shamoon
8d0e07e931
Fix: skip workflow title migration for empty titles (#11136) 2025-10-22 12:17:06 -07:00
shamoon
bf9e3fca48
Fix: restore workflow title migration (#11131) 2025-10-22 18:40:13 +00:00
shamoon
13161ebb01
Fix: retrieve document_count for tag children (#11125) 2025-10-22 11:13:15 -07:00
shamoon
fcae006afa
Tweak: improve tag parent validation error handling (#11096) 2025-10-20 22:42:01 -07:00
Jan Kleine
340754d865
Enhancement: use friendly file names when emailing documents (#11055) 2025-10-15 17:10:25 +00:00
shamoon
f6c004183e
Feature: Advanced Workflow Trigger Filters (#11029) 2025-10-13 22:23:56 +00:00
Jan Kleine
f0d1c75fac
Feature: add support for emailing multiple documents (#10666)
---------

Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
2025-10-13 13:16:43 -07:00
shamoon
df86882e8e
Fix: require only change permissions for task dismissal, add frontend error handling (#11023) 2025-10-07 00:56:16 -07:00
shamoon
79b30fbade
Enhancement: ignore same files in sanity checker as consumer (#10999) 2025-10-06 09:59:01 -07:00