ad23812c37
fix(security): make GitHub fetch SSRF guard CodeQL-visible
...
Use allowlisted hostname literals with https.get options instead of a
full URL string so request-forgery analysis sees a fixed host.
Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)
2026-10-17 16:36:40 +02:00
44221f721b
fix(security): close remaining CodeQL findings before 3.5.5
...
Confine multer unlink to reconstructed safe paths, rate-limit public
agent downloads, allowlist GitHub fetch hosts and local builder tools.
Expand CodeQL query filters for validated false positives.
Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)
2026-10-17 16:32:23 +02:00
f4e2a16ad3
Accept stripped desktop binaries in generator module
2026-09-19 20:51:15 +02:00
854d291c3c
Complete BetterDesk Support generator workflow
2026-09-19 18:53:19 +02:00
a070eb0bc3
Fix Support Generator builds and UI validation
...
Reject stub-only template packages, hide legacy CDAP bundles, and fix the slug pattern / builds title i18n.
2026-09-07 06:55:25 +02:00
6f07a957e8
Fix Support Generator module install and i18n
...
Fall back when GitHub /releases/latest is missing, return clear errors, and translate the module install gate.
2026-09-07 06:44:20 +02:00
01aebf597c
Replace CDAP Support Agent generator with BetterDesk Support templates
...
Install Client generator templates from GitHub, inject custom.txt for incoming-only builds, and remove the Go Support Agent pipeline.
2026-09-07 01:29:41 +02:00
UNITRONIX