bjoernpoettker/paperlessmanager
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): Befunde aus dem Security-Audit beheben #7

Merged
bjoernpoettker merged 10 commits from fix/security-audit into main 2026-11-04 10:03:36 +00:00
Conversation 0 Commits 10 Files Changed 60
+8 -4
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit d37e02e157 - Show all commits
paperless-backend/src/paperless/paperless.controller.ts
+8 -4
View File
@@ -276,12 +276,16 @@ export class PaperlessController {
} }
/** /**
* Original-PDF – für den Bearbeiten-Dialog und den Duplikatvergleich im * Original-PDF – für den Bearbeiten-Dialog und den Duplikatvergleich in
* Scanner (dort ein beliebiges vorhandenes Dokument), deshalb ohne Prüfung * Scanner und Mail-Import (dort ein beliebiges vorhandenes Dokument),
* pro Dokument. * deshalb ohne Prüfung pro Dokument.
*/ */
@Get('documents/:id/pdf') @Get('documents/:id/pdf')
@RequirePermissions(Permission.VIEW_INBOX, Permission.VIEW_SCANNER) @RequirePermissions(
Permission.VIEW_INBOX,
Permission.VIEW_SCANNER,
Permission.VIEW_MAIL,
)
async getDocumentPdf(@Param('id') id: string, @Res() res: Response) { async getDocumentPdf(@Param('id') id: string, @Res() res: Response) {
try { try {
const stream = await this.paperlessService.getDocumentPdfStream( const stream = await this.paperlessService.getDocumentPdfStream(