Adam Daley 4ec924a908 Backport #4474 hardening splits (batch 2: payment return) ...

Route gateway return/cancel/thank-you URLs through a dedicated
/invoice/payment-return page that only redirects to fixed invoice
destinations; drop the legacy session restore_token flow (index.php,
ServicePayGateway, Tools helpers); PayPal returns use browser
redirects (rm=1); bound ipn.php callback body with
ServiceTransaction::MAX_CALLBACK_BODY_SIZE.

2026-10-23 01:17:56 +01:00

..

Datasets

Reject multi-label and overlong ACE SLDs in isSldValid

2026-09-15 20:13:16 +01:00

E2E

Fix Cypress client factory and stale-password check for the guest guard

2026-10-18 01:37:57 +01:00

Fixtures/Email

Fix email template upgrades and refactor patch90 tests (#3986)

2026-07-16 06:41:45 +01:00

Helpers

Backport several fixes from main to 0.8-next

2026-10-23 00:55:10 +01:00

Strict

Harden templates and API responses against missing data (#3730)

2026-06-06 18:32:19 +01:00

Support

Show discounted payment amount on client order details page (#4114)

2026-08-16 20:05:58 +01:00

Unit

Backport #4474 hardening splits (batch 2: payment return)

2026-10-23 01:17:56 +01:00

Pest.php

Promo redemption history UI, and a bootstrap safety fix (#4119)

2026-08-16 16:44:49 +01:00