Stop cross-org background image leak; order-safe reorder + staging bucket

FixSecurityService
Shipped
July 1, 2026 at 3:40 AM UTC
Author
Kamo
Commit
d08a03a

Reordering only re-uploaded new files to their new index, dropping reordered existing images and leaving imageBgCount claiming unpopulated slots; provisioning then served whatever residual (cross-org) object sat at that public key. - provisioning deletes a counted slot's stale public object when no image is staged - new /backgrounds/incoming + /backgrounds/commit endpoints re-slot atomically - staging bucket now configured (theme.staging.bucket) instead of the sumtingwong sentinel

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing