18 Commits

Author	SHA1	Message	Date
Alexandre Bodin	cf49ddbbfc	Prettier and backend fix	2022-08-11 10:20:49 +02:00
Alexandre Bodin	0ae14c06cb	1st fix pass	2022-08-11 10:20:48 +02:00
Ben Irvin	af4349a1a8	return after each relation type is handled	2022-07-22 15:32:25 +02:00
Ben Irvin	266e5a79aa	remove comment	2022-07-20 18:27:56 +02:00
Ben Irvin	5b0ec53f09	check populateCreatorFields	2022-07-20 09:18:23 +02:00
Ben Irvin	e1222f7aef	fix comment	2022-07-19 17:58:40 +02:00
Ben Irvin	9abeb13fbc	allow creator relations	2022-07-19 10:30:55 +02:00
harimkims	5959788352	Refactor sanitizers module to be maintained easily	2022-05-07 17:04:12 +09:00
chisus	0b60be2aca	Add sanitizers registry to container ... - Remove users-permissions sanitization step in core - Move sanitization functions to users-permissions plugin utils - Add sanitizers registry to container for manage sanitizer functions in core so that we can get/add sanitizers anywhere we want	2022-04-21 00:29:35 +09:00
Kim, Harim	e0191544e5	Merge branch 'strapi:master' into fix/populate-user	2022-04-20 21:50:33 +09:00
Alexandre Bodin	6a9db23311	Fix sanitize media	2022-03-08 17:45:31 +01:00
harimkims	4a71a9c93c	Add new sanitizer to remove user relation from role entities	2022-03-03 22:45:55 +09:00
Convly	25e62db93a	use 'sanitizers' instead of 'utils'	2021-11-10 17:08:54 +01:00
Convly	8d4f8ddd57	Simplify & abstract common sanitize logic	2021-11-08 15:52:42 +01:00
Convly	7c560e3b94	Move the eventHub sanitize logic to the eventHub declaration	2021-11-05 10:36:10 +01:00
Convly	5de071a92e	Fix typo	2021-11-04 16:51:40 +01:00
Convly	d6516116b2	Move pipeAsync to @strapi/utils	2021-11-04 16:43:27 +01:00
Jean-Sébastien Herbaux	7f285fb755	[V4] Enhanced sanitize & remove restricted relations from content API's payloads (#11411) ... * Rework sanitizeEntity, first iteration * remove console.log * Remove useless comments * Fix e2e tests * Fix up user e2e test * Fix remove-restricted-relations visitor * Handle grapqhql resolver, prevent access to restricted relations * Handle polymorphic relation in the related visitor * Remove morph attribute if empty * Use only the find action to check if the relation is allowed	2021-11-04 15:47:53 +01:00