diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/web/SignatureImageController.java b/app/core/src/main/java/stirling/software/SPDF/controller/web/SignatureImageController.java index 90313af29b..5d69d60c8c 100644 --- a/app/core/src/main/java/stirling/software/SPDF/controller/web/SignatureImageController.java +++ b/app/core/src/main/java/stirling/software/SPDF/controller/web/SignatureImageController.java @@ -19,9 +19,9 @@ import stirling.software.common.service.UserServiceInterface; /** * Unified signature image controller that works for both authenticated and unauthenticated users. - * Uses composition pattern: - Core SharedSignatureService (always available): reads shared signatures - - * PersonalSignatureService (proprietary, optional): reads personal signatures For authenticated - * signature management (save/delete), see proprietary SignatureController. + * Uses composition pattern: - Core SharedSignatureService (always available): reads shared + * signatures - PersonalSignatureService (proprietary, optional): reads personal signatures For + * authenticated signature management (save/delete), see proprietary SignatureController. */ @Slf4j @RestController diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/AdminLicenseController.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/AdminLicenseController.java index c75b4d23f8..018607e4db 100644 --- a/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/AdminLicenseController.java +++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/controller/api/AdminLicenseController.java @@ -283,7 +283,12 @@ public class AdminLicenseController { // Prevent path traversal and enforce single filename component if (filename.contains("..") || filename.contains("/") || filename.contains("\\")) { return ResponseEntity.badRequest() - .body(Map.of("success", false, "error", "Filename must not contain path separators or '..'")); + .body( + Map.of( + "success", + false, + "error", + "Filename must not contain path separators or '..'")); } // Validate file extension