Replace the old skip_archive_file DB field with the correctly-named
archive_file_generation field on ApplicationConfiguration. Remove the
temporary getattr fallback in OcrConfig now that the migration exists.
Update all test fixtures and API response assertions to use the new field name.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* Security: prevent XSS with storage path template rendering
* Security: prevent XSS svg uploads
* Security: force attachment disposition for logo
* Add suggestions from code review
* Improve SVG validation with allowlist for tags and attributes
* Allows new user args field to be null
* Coerce empty string to None for user_args JSONField
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com>
Trenton H
shamoon
Sebastian Steinbeißer
Christoph Schober