Small, medium priority security fixes - #552

Open

georgelgeback wants to merge 6 commits into

mainfrom

Commits on Jul 30, 2026

Fix bug in unfinished ad router where anyone could create an ad in another user's name.
georgelgeback
committed
d8dde9a
Fix csv injection
georgelgeback
committed
ecb2485
Fix bug in html cleaning (on backend)
georgelgeback
committed
eeff7c2
Require member perms to get all users with post, which is also necessary for getting all posts, or all councils
georgelgeback
committed
63fa36b
add regression tests for fixes
georgelgeback
committed
b566423
Add missing event fixture
georgelgeback
committed
ff6a587