Dylan M. Taylor 8c45a8dd5b Merge pull request #3937 from dylanmtaylor/security/review-findings-pathops ...

Security: planar map budgets for booleans, Live Paint, Offset Path and 3D effects

2026-10-25 16:46:05 -04:00

..

affinity

style: keep paint.rs spot-colour chain under rustfmt's max width (#3940)

2026-10-24 02:03:48 -04:00

brush

style: keep paint.rs spot-colour chain under rustfmt's max width (#3940)

2026-10-24 02:03:48 -04:00

cad

Keep escaped backslash literal before U+XXXX in DXF MTEXT

2026-10-24 20:54:42 +07:00

color

Color management: loading the working RGB profile again under its name takes effect at once

2026-10-24 19:36:34 +02:00

doc

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

effects

Fix #3964: Create Outlines, EPS, EMF/WMF and legacy .ai keep the ruby where the canvas draws it

2026-10-24 17:29:32 +07:00

engine

security(pathops): signed zeros, reported budget rejections, and a fill-only fallback

2026-10-25 16:04:29 -04:00

eps

Security: EPS and legacy Illustrator bounds (operator recursion, bind, copy, cvn, previews, writer output, ink name) (#3883)

2026-10-25 12:32:14 -04:00

format

Reject misplaced or excess '=' padding in base64_decode

2026-10-25 12:00:58 +00:00

geom

Security: bounded flattening, plug-in budgets and caches, loaded textures, Revolve paint copies, color book names and ICC names

2026-10-24 17:19:54 +07:00

mcp

Merge pull request #4068 from dotCooCoo/fix/eps-no-art-central-file-text

2026-10-25 10:38:12 -04:00

metafile

Fix #3964: Create Outlines, EPS, EMF/WMF and legacy .ai keep the ruby where the canvas draws it

2026-10-24 17:29:32 +07:00

pathops

security(pathops): count the sweep budget on the snapped geometry

2026-10-25 16:08:06 -04:00

pdf

Docking: panels on craft-ui's shared docking, floating panels in OS windows (#4135)

2026-10-25 15:25:35 -04:00

plugins

Security: bounded flattening, plug-in budgets and caches, loaded textures, Revolve paint copies, color book names and ICC names

2026-10-24 17:19:54 +07:00

render

Renderer tests: the Arabic alternate-glyph tests take the font lock

2026-10-24 23:49:34 +07:00

scriptcheck

fix(scriptcheck): settle what variables hold without a loader too

2026-10-24 21:10:06 +07:00

svg

Require two hex digits in SVG href percent escapes

2026-10-24 23:32:52 +07:00

testkit

Main's CI: an unnecessary map_or, testkit's Unix-only mut, and a temp-dir probe that tests running alongside removed

2026-10-24 09:26:06 +07:00

text

Type: threaded frames do not repeat a continued paragraph's first-line indent or list marker

2026-10-24 21:43:44 +07:00

three-d

Security: planar map budgets for booleans, Live Paint, Offset Path and 3D effects

2026-10-25 15:42:41 -04:00

tools

Merge pull request #4113 from storytold/codex/egui-037-vectorcraft-20261023

2026-10-25 14:09:31 -04:00

trace

Merge pull request #4077 from dotCooCoo/fix/trace-palette-drops-unused-colors

2026-10-25 10:38:08 -04:00

ui-egui

feat: startup update prompt modal and direct self-updating (#4138)

2026-10-25 16:22:52 -04:00