New security documentation
We have published new documentation about the FileUpload's preserveFilenames() and getUploadedFileNameForStorageUsing() methods, appropriate for anyone using a local or public filesystem disk with untrusted users. Please read it and take appropriate action to ensure that your application is not vulnerable to this type of attack:
Credit to @angelej for investigating this issue and giving us a heads up about the implications.
What's Changed
- Docs: Added
staticto exampleImporter::getColumns()method by @lukeholder in #12835 - feat: add support to override media model on spatie media file upload by @WayneHarris in #12829
- Feat: Adding grouping direction hidden method for the table grouping by @bensondevs in #12826
- Feature: Added the option to modals to prevent closing on escape key press by @borjajimnz in #12832
- Fix: Missing Tenant Registration, Profile and User Profile page component registration by @dev-idkwhoami in #12844
- lang: Add unsaved-changes-alert id translation by @NathanaelGT in #12866
- Improve Stats Overview Widgets documentation by @xikcode in #12862
- Fix: Incorrectly hiding the 'Select all X' table link by @dev-idkwhoami in #12853
- Fix: Hide toggleable hidden column in column toggle dropdown by @dev-idkwhoami in #12854
- Fix: Visual bug when using selectCurrentPageOnly in combination with grouping by @dev-idkwhoami in #12860
New Contributors
- @lukeholder made their first contribution in #12835
- @bensondevs made their first contribution in #12826
- @xikcode made their first contribution in #12862
Full Changelog: v3.2.80...v3.2.81