gsadmin/BetterDesk
1
0
Fork 0
mirror of https://github.com/UNITRONIX/BetterDesk.git synced 2026-09-11 01:55:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,158 Commits 23 Branches 13 Tags
fbdf5ba19e58e0097f230f6d64fe6302b83eb142
Commit Graph

2 Commits

Author SHA1 Message Date
UNITRONIX d7a2fe6562 fix(security): harden update restore and notification CSRF 
Protect backup restores and session-authenticated notification writes from unsafe state changes, while clearing CodeQL false positives without weakening intentional TLS pinning.

Refs CodeQL alerts #297-310

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-08-23 21:08:05 +02:00
UNITRONIX 25618caac1 fix(console): fail closed on missing peer/strategy scope writers 
Reject POST/PATCH /api/users before mutating when peer grant or strategy
assignment DB methods are absent; return refreshed scope on PATCH; warn
on unknown peerIds; add facade parity and scope regression tests.

Refs #380

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-08-22 01:17:41 +02:00