6 Commits

Author	SHA1	Message	Date
UNITRONIX	577fc79a97	chore: update Docker Compose image tags to 3.2.12 and enhance documentation for versioning	2026-06-11 18:36:48 +02:00
UNITRONIX	7b938d8c7b	fix(security): harden path confinement, SSRF, and shell exec ... Add shared safePath helper for file browser, i18n, and backup paths; use validated OIDC discovery URLs; restrict terminal shells and network monitor HTTP requests. Remove obsolete one-time i18n migration scripts already merged into lang/*.json.	2026-06-09 02:21:43 +02:00
UNITRONIX	c219f3be68	fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec ... Complete GHSA-3v82-3gf8-fxx8 WebSocket replay fix for soft-deleted peers, bump vulnerable Go/Rust dependencies, and apply CodeQL-driven hardening (OIDC URL validation, path confinement, execFileSync, rate limits).	2026-06-09 02:05:17 +02:00
UNITRONIX	647a3221f9	Harden console security and wire fixes into the update flow. ... Hash RustDesk access tokens at rest (phase 1), add SSRF guards for admin network tools with LAN monitoring support, run dedicated console service user on Linux, and hook post-update verification plus service patching into both betterdesk.sh and the in-app updater.	2026-06-06 14:40:51 +02:00
UNITRONIX	1e2047c033	BetterDesk 3.0.0 Alpha	2026-03-24 00:26:25 +01:00
UNITRONIX	e855f5786d	Add Go server and security audit; update web console ... Add a new betterdesk-server Go codebase (server, api, auth, db, relay, signal, metrics, audit, ratelimit, proto, tools, tests) and related deployment/migration scripts. Add a comprehensive SECURITY_AUDIT_2026-03-01 report and .gitattributes; update copilot-instructions (ALL-IN-ONE v2.4.0), README, VERSION, Dockerfiles, scripts, docker-compose and entrypoint. Large updates to web-nodejs (translations, routes, services, frontend assets and middleware) and numerous new utilities; remove legacy Flask web files and archive hbbs-patch-v2 artifacts. Prepares repository for PostgreSQL support, DB migration tooling and the new Go server as the production backend.	2026-03-02 00:43:04 +01:00