Code

History

Commits on fix/cmdi-compose-path-command35+
  1. Update compose-command-injection.test.tsMauricio Siu committed 3 months agodd32a23
  2. [autofix.ci] apply automated fixesautofix-ci[bot] committed 3 months agofbd84b9
  3. fix(security): escape compose path and validate custom compose commandMauricio Siu committed 3 months agod48037a
  4. Merge pull request #4862 from Dokploy/fix/cmdi-db-backup-restoreMauricio Siu committed 3 months ago8539a5c
  5. fix(security): pass db backup/restore identifiers via env vars to avoid injectionMauricio Siu committed 3 months agoccd2e83
  6. Merge pull request #4861 from Dokploy/fix/cmdi-db-service-dockerimageMauricio Siu committed 3 months ago89effbe
  7. fix(security): escape dockerImage in database service remote docker pullMauricio Siu committed 3 months agob24202e
  8. Merge pull request #4860 from Dokploy/fix/cmdi-docker-build-pullMauricio Siu committed 3 months ago0348f5f
  9. fix(security): escape user input in docker build/pull commandsMauricio Siu committed 3 months agocba0b25
  10. Merge pull request #4859 from Dokploy/fix/idor-application-one-secret-redactionMauricio Siu committed 3 months ago1c31ed9
  11. refactor(security): exclude git provider secrets at query level in findApplicationByIdMauricio Siu committed 3 months agoecbaf60
  12. docs: trim block comment on redactApplicationGitSecretsMauricio Siu committed 3 months agoc0afc48
  13. Merge pull request #4858 from Dokploy/fix/idor-swarm-cross-orgMauricio Siu committed 3 months ago65fe737
  14. [autofix.ci] apply automated fixesautofix-ci[bot] committed 3 months ago77384b2
  15. fix(security): redact git provider secrets from application.one responseMauricio Siu committed 3 months ago68ea9f7
  16. refactor: inline the server org-scope check in each swarm handlerMauricio Siu committed 3 months ago182d365
  17. Merge pull request #4857 from Dokploy/fix/idor-server-ssh-key-disclosureMauricio Siu committed 3 months agoc2c0e9c
  18. fix(security): enforce org-scope on swarm reads and escape nodeIdMauricio Siu committed 3 months ago5563699
  19. test(types): annotate server record without sshKey relation in redaction testMauricio Siu committed 3 months ago117cfa1
  20. fix(security): redact SSH private key from server read responsesMauricio Siu committed 3 months ago439eee4
  21. Merge pull request #4856 from Dokploy/fix/idor-git-provider-secret-disclosureMauricio Siu committed 3 months agoe88c6b6
  22. fix(types): guard git-provider access check for optional id in getBranchesMauricio Siu committed 3 months ago26cae3b
  23. fix(security): enforce org-scope on git provider read endpointsMauricio Siu committed 3 months ago071d9ea
  24. Merge pull request #4855 from Dokploy/fix/cmdi-git-clone-providersMauricio Siu committed 3 months ago57ecfa8
  25. test(security): fix type error in shell-quote op assertionMauricio Siu committed 3 months ago97cd7d1
  26. test(security): regression tests for git clone command injection escapingMauricio Siu committed 3 months agocf35eae
  27. [autofix.ci] apply automated fixesautofix-ci[bot] committed 3 months agofb7f5bd
  28. fix(security): escape user input in git clone commands across all providersMauricio Siu committed 3 months ago47347ab
  29. Remove unused localization files for various languages in the Dokploy application, including common and settings JSON files for Azerbaijani, German, English, Spanish, Persian, French, Indonesian, Italian, Japanese, Korean, Kazakh, Malayalam, Dutch, Norwegian, and Polish. This cleanup helps streamline the localization process by eliminating empty files.Mauricio Siu committed 3 months ago7481107
  30. Merge pull request #4800 from EvanSchleret/fix/typoMauricio Siu committed 3 months agodf3965a
  31. Merge pull request #4825 from Dokploy/fix/allow-clearing-server-domainMauricio Siu committed 3 months agobddc0c3
  32. Merge pull request #4826 from Dokploy/fix/repo-selector-duplicate-namesMauricio Siu committed 3 months ago9626c16
  33. refactor(ui): improve repository and branch display in popoversMauricio Siu committed 3 months agoc4596ff
  34. fix(ui): disambiguate repos with the same name in the repository selectorMauricio Siu committed 3 months agode62aff
  35. fix(settings): allow clearing the server domainMauricio Siu committed 3 months agod5dd35c