gsadmin/BetterDesk
1
0
Fork 0
mirror of https://github.com/UNITRONIX/BetterDesk.git synced 2026-10-26 22:37:07 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,394 Commits 38 Branches 17 Tags
v3.5.169
Commit Graph

6 Commits

Author SHA1 Message Date
UNITRONIX 78edc5eaf4 feat: add BetterDesk management capabilities 
Add allowlisted configuration management, permission diagnostics, safe service control, and repair workflows across native and Docker installers. Integrate panel capability checks with broker-backed writes and rollback, and document/test the lifecycle contract.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-09-18 20:45:57 +02:00
UNITRONIX c2e0e2e784 fix(security): harden CodeQL findings across console and Go server 
Address GitHub code scanning alerts with OIDC SSRF guards, confined path
helpers, safer client routing, branding sanitization, upload rate limits,
and CodeQL config exclusions for dev-only and protocol-intentional hashes.
 2026-06-11 06:57:58 +02:00
UNITRONIX 97492d6005 fix(security): validate Go API paths and file browser entries 
Add goApiPath guard on betterdeskApi axios requests, sanitize org/device
IDs in policy routes, and confine server-management directory listings
with resolveChildPath.
 2026-06-09 02:46:22 +02:00
UNITRONIX 7b938d8c7b fix(security): harden path confinement, SSRF, and shell exec 
Add shared safePath helper for file browser, i18n, and backup paths;
use validated OIDC discovery URLs; restrict terminal shells and
network monitor HTTP requests. Remove obsolete one-time i18n migration
scripts already merged into lang/*.json.
 2026-06-09 02:21:43 +02:00
UNITRONIX c219f3be68 fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec 
Complete GHSA-3v82-3gf8-fxx8 WebSocket replay fix for soft-deleted peers,
bump vulnerable Go/Rust dependencies, and apply CodeQL-driven hardening
(OIDC URL validation, path confinement, execFileSync, rate limits).
 2026-06-09 02:05:17 +02:00
UNITRONIX a8d3259d43 feat(server-management): add server management service and terminal proxy 
- Implemented server management service providing resource snapshots, file browser, service control, and audit logging.
- Added terminal proxy for WebSocket-backed PTY, allowing browser-based shell access with user authentication and role-based access control.
- Created server management view with tabs for overview, terminal, file management, and services, including UI elements for displaying system metrics and managing files/services.

Co-authored-by: Copilot <copilot@github.com>
 2026-05-07 03:09:03 +02:00