Pranav
2adc040a8f
fix: Validate blob before attaching it to a record ( #13115 )
...
Previously, attachments relied only on blob_id, which made it possible
to attach blobs across accounts by enumerating IDs. We now require both
blob_id and blob_key, add cross-account validation to prevent blob
reuse, and centralize the logic in a shared BlobOwnershipValidation
concern.
It also fixes a frontend bug where mixed-type action params (number +
string) were incorrectly dropped, causing attachment uploads to fail.
2025-12-19 19:02:21 -08:00
..
2023-05-19 14:37:10 +05:30
2025-08-18 19:15:21 -07:00
2023-05-19 14:37:10 +05:30
2023-05-29 21:57:24 +05:30
2025-11-18 18:20:58 -08:00
2025-06-18 17:39:06 +05:30
2025-08-18 19:15:21 -07:00
2025-04-03 13:57:14 +05:30
2025-07-01 16:49:26 +05:30
2025-06-18 17:39:06 +05:30
2025-07-14 21:37:06 -07:00
2025-12-17 07:54:50 -08:00
2023-05-19 14:37:10 +05:30
2025-09-15 19:59:56 +05:30
2025-05-29 14:42:13 +05:30
2024-04-04 19:44:47 +05:30
2025-11-13 12:07:24 +05:30
2022-05-23 19:24:07 +05:30
2025-08-18 19:15:21 -07:00
2025-12-19 19:02:21 -08:00
2025-11-04 17:47:53 -08:00
2021-11-11 13:03:48 +05:30
2025-03-19 17:29:08 -07:00
2023-05-19 14:37:10 +05:30
2025-04-03 16:00:32 -07:00
2023-09-28 15:26:28 -07:00
2025-04-29 09:14:00 +05:30
2025-06-05 15:53:17 -05:00
2023-05-19 14:37:10 +05:30
2025-03-03 16:38:22 +05:30
2025-10-06 10:41:26 -07:00
2024-01-18 17:48:30 +05:30
2025-12-11 16:36:37 +05:30
2025-02-20 21:28:38 -08:00
2025-12-11 16:36:37 +05:30
2022-07-15 09:51:59 +07:00
2025-12-19 19:02:21 -08:00
2023-05-19 14:37:10 +05:30
2024-02-20 18:55:39 +05:30
2025-09-17 22:27:50 +05:30
2025-05-28 13:50:50 +05:30
2023-05-19 14:37:10 +05:30
2023-05-19 14:37:10 +05:30
2025-11-13 13:28:15 +05:30