fix(admin): keep account photos out of the media library

2026-09-29 23:47:27 +02:00
parent ba6416623f
commit 81d22b24a7
8 changed files with 233 additions and 15 deletions
@@ -14,6 +14,11 @@ this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
  through their leading `v`. The comparison now accepts both shapes, so
  v1.0.0 against 1.0.0 is no update at all, and the update button can no
  longer reinstall the version that is already running.
+- A profile photo upload landed in the media library as a tile. Photos now
+  live under `avatars/` inside the media directory and the library never
+  lists them; photos of installations that predate the directory stay out of
+  the tiles as well, and a media delete can no longer remove a whole
+  directory through a crafted URL.

 ### Added