f018f8f3c9
fix(console): polish dashboard chat and accessibility
...
Complete the console UI and chat relay follow-up work, including dashboard uptime placement, branding form styling, accessibility icon compatibility, security audit coverage, and device/operator chat delivery.\n\nRefs #440\n\nThanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
2026-10-03 10:44:20 +02:00
ce988724c1
fix(console): share one WebSocket upgrade dispatcher ( #295 )
...
Collapse 11 per-service upgrade listeners into wsUpgradeRouter so Node no longer emits a false MaxListenersExceededWarning at panel startup.
2026-07-22 18:21:50 +02:00
c2e0e2e784
fix(security): harden CodeQL findings across console and Go server
...
Address GitHub code scanning alerts with OIDC SSRF guards, confined path
helpers, safer client routing, branding sanitization, upload rate limits,
and CodeQL config exclusions for dev-only and protocol-intentional hashes.
2026-06-11 06:57:58 +02:00
7b938d8c7b
fix(security): harden path confinement, SSRF, and shell exec
...
Add shared safePath helper for file browser, i18n, and backup paths;
use validated OIDC discovery URLs; restrict terminal shells and
network monitor HTTP requests. Remove obsolete one-time i18n migration
scripts already merged into lang/*.json.
2026-06-09 02:21:43 +02:00
a8d3259d43
feat(server-management): add server management service and terminal proxy
...
- Implemented server management service providing resource snapshots, file browser, service control, and audit logging.
- Added terminal proxy for WebSocket-backed PTY, allowing browser-based shell access with user authentication and role-based access control.
- Created server management view with tabs for overview, terminal, file management, and services, including UI elements for displaying system metrics and managing files/services.
Co-authored-by: Copilot <copilot@github.com >
2026-05-07 03:09:03 +02:00
UNITRONIX