3 Commits

Author	SHA1	Message	Date
UNITRONIX	c2e0e2e784	fix(security): harden CodeQL findings across console and Go server ... Address GitHub code scanning alerts with OIDC SSRF guards, confined path helpers, safer client routing, branding sanitization, upload rate limits, and CodeQL config exclusions for dev-only and protocol-intentional hashes.	2026-06-11 06:57:58 +02:00
UNITRONIX	7b938d8c7b	fix(security): harden path confinement, SSRF, and shell exec ... Add shared safePath helper for file browser, i18n, and backup paths; use validated OIDC discovery URLs; restrict terminal shells and network monitor HTTP requests. Remove obsolete one-time i18n migration scripts already merged into lang/*.json.	2026-06-09 02:21:43 +02:00
UNITRONIX	a8d3259d43	feat(server-management): add server management service and terminal proxy ... - Implemented server management service providing resource snapshots, file browser, service control, and audit logging. - Added terminal proxy for WebSocket-backed PTY, allowing browser-based shell access with user authentication and role-based access control. - Created server management view with tabs for overview, terminal, file management, and services, including UI elements for displaying system metrics and managing files/services. Co-authored-by: Copilot <copilot@github.com>	2026-05-07 03:09:03 +02:00