5 Commits

Author	SHA1	Message	Date
UNITRONIX	c2e0e2e784	fix(security): harden CodeQL findings across console and Go server ... Address GitHub code scanning alerts with OIDC SSRF guards, confined path helpers, safer client routing, branding sanitization, upload rate limits, and CodeQL config exclusions for dev-only and protocol-intentional hashes.	2026-06-11 06:57:58 +02:00
UNITRONIX	97492d6005	fix(security): validate Go API paths and file browser entries ... Add goApiPath guard on betterdeskApi axios requests, sanitize org/device IDs in policy routes, and confine server-management directory listings with resolveChildPath.	2026-06-09 02:46:22 +02:00
UNITRONIX	7b938d8c7b	fix(security): harden path confinement, SSRF, and shell exec ... Add shared safePath helper for file browser, i18n, and backup paths; use validated OIDC discovery URLs; restrict terminal shells and network monitor HTTP requests. Remove obsolete one-time i18n migration scripts already merged into lang/*.json.	2026-06-09 02:21:43 +02:00
UNITRONIX	c219f3be68	fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec ... Complete GHSA-3v82-3gf8-fxx8 WebSocket replay fix for soft-deleted peers, bump vulnerable Go/Rust dependencies, and apply CodeQL-driven hardening (OIDC URL validation, path confinement, execFileSync, rate limits).	2026-06-09 02:05:17 +02:00
UNITRONIX	a8d3259d43	feat(server-management): add server management service and terminal proxy ... - Implemented server management service providing resource snapshots, file browser, service control, and audit logging. - Added terminal proxy for WebSocket-backed PTY, allowing browser-based shell access with user authentication and role-based access control. - Created server management view with tabs for overview, terminal, file management, and services, including UI elements for displaying system metrics and managing files/services. Co-authored-by: Copilot <copilot@github.com>	2026-05-07 03:09:03 +02:00