Recent Activities
This page shows what are we working on.
-
head
-
Update frontend models for label text fields in system config b743ec
-
Enhance label variables editor with improved variable handling and styling d8e08e
-
Implement LabelText editor with variable support and update configuration ca300f
-
Add new variables for price and discount amount without tax:
- price_base
- final_price_base
- special_price_base
- discount_amount_base e19b20
-
-
1.7.30
-
head
-
Remove recently viewed & compare 934035
-
Improve red element on product page #4 8a7342
-
Fix 695480
-
Order page create #6 52fa24
-
Style Release Notes 369993
-
Improve styles for product page description #9 b5aae0
-
Product Feature. Add icon arrow. 92261d
-
Blog Update page title styling #7 d2485a
-
Style Features a1fee5
-
Blog Page. Update styling #7 fa2c92
-
Deployer page #1 711183
-
Account page. Remove unused menu items #8 6efcbc
-
deployer page bc243e
-
fix code style e164dd
-
contact us & post pages 49fadb
-
show price on category page 65dcbd
-
-
head
-
head
-
Fix mobile footer collapsible list background color to match footer green c08cb5
-
Comment out min-height and aspect-ratio on jumbotron-image to remove blank space above slider b00ea7
-
Fix empty space on homepage - reduce jumbotron min-height from 448px to 200px, hide empty hr_frontPage boxes b283be
-
Add Dutch translations for product review prompt, out of stock source items, and requested quantity error
- Be the first person to review this product. Share with others whether you like it or not.
- There are no source items with the in stock status
- THE REQUESTED QTY IS NOT AVAILABLE 2fcb33
-
-
1.0.72
-
1.0.71
-
1.8.5
-
1.8.4
-
1.4.4
-
Version 1.4.4 9de74d
-
fix(TicketDataFilter): context-aware forbidden fields — admin vs frontend (close #61)
Admin UI Component sends ALL form fields (hidden + disabled) on every POST,
so logging system fields as 'attacks' creates false positives for every
legitimate admin ticket save (issue #61).
Split FORBIDDEN_FIELDS into two context-aware lists:
- FORBIDDEN_FRONTEND_FIELDS: ticket_id, number, created_at, modified_at,
store_id, visitor_id, rate — suspicious from a regular customer
- FORBIDDEN_ADMIN_FIELDS: [] — admin can do everything, whitelist is the defense
Updated hasForbiddenFields/getAttemptedForbiddenFields to accept $isAdmin flag.
Callers explicitly pass false (frontend) or true (admin). 1088a0 -
fix(TicketDataFilter): empty FORBIDDEN_FIELDS to stop false positive security logs
Magento UI Component admin form sends ALL fields (hidden + disabled) on
every POST — ticket_id, number, created_at, store_id, etc. — causing a
'Mass Assignment attack' warning on every legitimate admin ticket save.
The whitelist (filterAdminData/filterCustomerData) is the actual defense.
FORBIDDEN_FIELDS detection is redundant and misleading in this context. ebc2eb -
fix(TicketDataFilter): add missing keys to ADMIN_ADDITIONAL_FIELDS
Keys swissup_helpdesk_ticket_message, http, website, ftp were silently
stripped by filterAdminData() before reaching ResourceModel/_beforeSave
and _afterSave, causing:
- admin replies to never create TicketMessage (no email sent to customer)
- HTTP/website/FTP credentials to never be written to the notes field 3920bc
-
-
1.4.3