4 Commits

Author	SHA1	Message	Date
UNITRONIX	577fc79a97	chore: update Docker Compose image tags to 3.2.12 and enhance documentation for versioning	2026-06-11 18:36:48 +02:00
UNITRONIX	c2e0e2e784	fix(security): harden CodeQL findings across console and Go server ... Address GitHub code scanning alerts with OIDC SSRF guards, confined path helpers, safer client routing, branding sanitization, upload rate limits, and CodeQL config exclusions for dev-only and protocol-intentional hashes.	2026-06-11 06:57:58 +02:00
UNITRONIX	6d7692ea6a	fix(security): phase-A log redaction, font/transfer paths, CI permissions ... Stop logging generated admin passwords, redact API login usernames, confine font and file-transfer temp paths with safePath, and scope GitHub Actions permissions in build.yml.	2026-06-09 02:42:56 +02:00
UNITRONIX	86582d84cb	Add font picker, text-logo and TLS fixes ... Add typography support and a text-based logo option plus several TLS/connectivity improvements. Introduces a new font service (web-nodejs/services/fontService.js) to search, download and serve Google Fonts for self-hosting, new API routes for font management, and client-side font picker UI/logic (settings.js) with CSS (pages.css, main.css) and i18n entries (en/pl/zh). BrandingService now supports logo text/accent and font heading/body and includes generated font CSS. Views (login/sidebar) updated to render text logos and a new theme (themes/insolve.json) added. Server and TLS updates: API server now prefers TLS on the API port when valid certs exist, and dual-mode listener in tls.go adds a short peek timeout to avoid deadlocks with RustDesk clients.	2026-04-11 02:24:14 +02:00