3 Commits

Author	SHA1	Message	Date
UNITRONIX	f346f891bc	fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp ... Centralize path-segment validation in goApiProxy for fleet/commercialization/cross-platform routes while preserving RustDesk peer ID compatibility; sanitize panel JS output and cap audit Recent queries.	2026-06-09 03:22:14 +02:00
UNITRONIX	4c9a1f632e	fix(security): phase-D Go API ID guards across all proxy routes ... Extend assertSafeApiId to organizations, resource-control, permissions, tokens, and update paths; harden org UI XSS and attachment confinement.	2026-06-09 03:13:53 +02:00
UNITRONIX	97492d6005	fix(security): validate Go API paths and file browser entries ... Add goApiPath guard on betterdeskApi axios requests, sanitize org/device IDs in policy routes, and confine server-management directory listings with resolveChildPath.	2026-06-09 02:46:22 +02:00