Azerbaijan localization for JeyERP
Go to file
Ali 70215e200c fix(bank-integration): preview XSS, header completeness, ref-number safeguards, per-file currency
- Escape t.ref_no / t.counterparty / t.purpose / error fields with
  escape_html when rendering the preview and error-detail dialogs. A
  malicious bank statement (or counterparty-supplied purpose text)
  containing HTML could otherwise execute in the importer's session.
- Parser now refuses to proceed if any standard field required by the
  selected Amount Mode is missing from the file headers — instead of
  silently dropping every row with reason "amount" / "date".
- Reference Number is now a required mapping for all Amount Modes,
  preventing a class of silent duplication on re-import. parse_excel_for_
  preview also returns empty_ref_count and the preview surfaces a warning
  about future duplicate risk when some rows have an empty Reference
  Number on disk.
- Add 'Use Currency From File' checkbox on Excel Preset (default off).
  When on, BT.currency uses the parsed Currency column with fallback to
  the Bank Account's currency. import_bulk_bt now takes preset_name and
  the background job reads the flag.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 16:52:34 +00:00
jey_erp fix(bank-integration): preview XSS, header completeness, ref-number safeguards, per-file currency 2026-05-13 16:52:34 +00:00
.gitignore feat: Initialize App 2024-09-12 10:11:33 +00:00
BANK_INTEGRATION_PLAN.md feat(bank-integration): universal Excel-based bank statement import 2026-05-08 16:23:44 +00:00
README.md feat: Initialize App 2024-09-12 10:11:33 +00:00
TASK_CONTEXT.md renewed company_defaults 2026-03-26 17:44:45 +04:00
license.txt feat: Initialize App 2024-09-12 10:11:33 +00:00
pyproject.toml feat: Initialize App 2024-09-12 10:11:33 +00:00

README.md

Jey Erp

Azerbaijan localization for JeyERP

License

unlicense