typebot.io/apps/viewer
Baptiste Arnaud a64e82b612
🐛 Fix unsafe upload URL generation (#2502)
- Replace direct browser presigned PUT uploads with signed Typebot
upload proxy URLs.
- Generate or validate upload object keys server-side while preserving
legacy v1/v2/v3 file-input upload contracts.
- Keep builder slot uploads stable for replaceable assets and use
generated names for runtime file uploads.
- Store active file-input MIME types as safe attachment downloads while
keeping safe image uploads inline.
- Update upload clients and docs to support both raw PUT proxy uploads
and form-data uploads.
2026-05-21 18:37:04 +02:00
..
public 👌 Move metadata to share page (#2398) 2026-02-13 18:31:03 +01:00
src 🐛 Fix unsafe upload URL generation (#2502) 2026-05-21 18:37:04 +02:00
next.config.mjs 📝 Document status page and analytics completion criteria (#2480) 2026-05-01 11:10:10 +02:00
openapi.tsconfig.json ♻️ Migrate to NX (#2418) 2026-03-18 15:29:32 +00:00
package.json 🔒️ Upgrade vulnerable deps (ai v5, nodemailer v8, otel sdk-node 0.217) (#2491) 2026-05-19 16:30:36 +02:00
playwright.config.ts 🔧 Enable PR2 Biome rules and mechanical autofixes 2026-03-13 11:46:28 +01:00
tsconfig.json 🐛 Fix code scanning findings 2026-03-19 10:21:03 +01:00
vercel.json 🧹 Move functions Vercel config to dashboard 2025-06-25 09:54:53 +02:00