Improved

[Improved, Fixed] Secure logo upload

Improvements

  • Logo images are now automatically converted to lightweight WebP format, giving faster load times on the careers page and dashboard
  • The file picker now only shows supported formats (PNG or JPEG) and clearly explains the 2 MB size limit

Fixes

  • Closed a vulnerability that allowed any signed-in user to overwrite another company’s logo
  • Blocked uploads of SVG, PDF, ZIP, and other unsupported files to prevent malicious or broken images from being saved
  • Corrected an issue where entering an invalid YouTube or colour value could inject unexpected content into the company profile