CI Report:

https://ci-tests.linuxserver.io/linuxserver/projectsend/r2002-ls261/index.html

LinuxServer Changes:

No changes

Remote Changes:

What's Changed in r2002

Security

• Path Traversal Fix in Import Orphans: Sanitized filenames with basename() before constructing file paths in the import and delete actions, preventing directory traversal attacks via crafted POST values (#994)

Bug Fixes

• Dashboard Storage Usage Calculation: Fixed the file size migration that caused PHP memory/time limits on large installations, leaving most size values at 0. Added a "Recalculate Storage" button for admins (#1533)
• Gulp 5 Corrupting Font Files: Fixed binary font files being corrupted during build due to Gulp 5's default UTF-8 encoding (#1531)
• HTML Output of File Descriptions: Fixed CKEditor file descriptions showing raw HTML tags instead of rendered content across all templates (#1528)
• PHP 8.2 Deprecation Warnings: Fixed "Creation of dynamic property" warnings in CustomAsset class
• Bullets Alignment: Fixed list bullets alignment in public download descriptions

Improvements

• Timezone Select Refactor: Rewrote timezone selector to use the standard form system with proper optgroup support

Maintenance

• Translation Strings Updates

SHA-256: 1077902d3b2dac44676b14072fe3c191020cf273e25dd1c528021e0d49ea8cc5

Full Changelog: projectsend/projectsend@r1994...r2002