Files
Stirling-PDF/app
Anthony Stirling 7111f0d2df refactor: improve security and code quality with Pattern instances
Replace regex string literals with compiled Pattern instances for better
performance and readability.

Security improvements:
- MobileScannerService: Add input validation patterns
  - Filename sanitization pattern
  - Session ID validation pattern
  - File extension validation pattern
  - Prevents path traversal and injection attacks

- SvgSanitizer: Enhanced SVG sanitization

Code quality improvements:
- Convert regex string literals to Pattern.compile() across codebase
- Better performance (patterns compiled once vs per-use)
- More explicit intent in code
- Easier to maintain and test

Changed files:
- Controllers: MergeController, ConvertPdfJsonController, StampController,
  PipelineDirectoryProcessor, ReactRoutingController, UIDataTessdataController
- Services: PdfJsonConversionService, PdfJsonFallbackFontService,
  SharedSignatureService, TotpService, SignatureService
- Core: SPDFApplication
- Tests updated accordingly

Related: #5680 (if already merged, this consolidates remaining changes)
2026-02-16 10:44:21 +00:00
..