KamoCRM

Stop cross-org background image leak; order-safe reorder + staging bucket

FixSecurityService
Shipped
1 ஜூலை, 2026 அன்று 3:40 AM UTC
Author
Kamo
Commit
d08a03a

Reordering only re-uploaded new files to their new index, dropping reordered existing images and leaving imageBgCount claiming unpopulated slots; provisioning then served whatever residual (cross-org) object sat at that public key. - provisioning deletes a counted slot's stale public object when no image is staged - new /backgrounds/incoming + /backgrounds/commit endpoints re-slot atomically - staging bucket now configured (theme.staging.bucket) instead of the sumtingwong sentinel

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing