5 Commits

Author	SHA1	Message	Date
UNITRONIX	6c16454fc7	chore(codeql): broaden query exclusions for confined paths and escaped UI ... Document safePath consumers, escaped chat/cdap DOM updates, test harness, and dev-only i18n audit script in codeql-config.yml for PR gate parity. Refs #196	2026-06-12 06:22:00 +02:00
UNITRONIX	188a13c2c0	fix(security): resolve CodeQL type-confusion and extend query exclusions ... Use plainBodyObject() for device file read API to avoid array .length tampering; rate-limit ticket DELETE; document intentional sanitizers in codeql-config.yml for branding, fonts, network monitor, and server paths. Refs #196	2026-06-12 06:19:04 +02:00
UNITRONIX	577fc79a97	chore: update Docker Compose image tags to 3.2.12 and enhance documentation for versioning	2026-06-11 18:36:48 +02:00
UNITRONIX	aea7b30b29	fix(security): enhance path validation and rate limiting for file access ... Updated CodeQL configuration to exclude additional paths for security checks. Introduced a new file access rate limiter to prevent abuse of file download endpoints. Improved path resolution functions to ensure confined access and added validation in body scalar functions to reject non-scalar types. Enhanced error handling in API endpoint validation to prevent invalid inputs.	2026-06-11 18:33:14 +02:00
UNITRONIX	c2e0e2e784	fix(security): harden CodeQL findings across console and Go server ... Address GitHub code scanning alerts with OIDC SSRF guards, confined path helpers, safer client routing, branding sanitization, upload rate limits, and CodeQL config exclusions for dev-only and protocol-intentional hashes.	2026-06-11 06:57:58 +02:00