UNITRONIX 44221f721b fix(security): close remaining CodeQL findings before 3.5.5 ...

Confine multer unlink to reconstructed safe paths, rate-limit public
agent downloads, allowlist GitHub fetch hosts and local builder tools.
Expand CodeQL query filters for validated false positives.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)

2026-10-17 16:32:23 +02:00

..

bodyScalars.js

fix(security): resolve CodeQL type-confusion and extend query exclusions

2026-06-12 06:19:04 +02:00

consoleDeployGraph.js

fix(update): preserve explicit config file extensions

2026-09-19 11:04:49 +02:00

consoleNpmInstall.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

deviceTokenAuth.js

fix(console): share SQLite handle and bump better-sqlite3 for Node 24 (#353)

2026-08-06 01:17:04 +02:00

envMerge.js

feat(remote): add gated RDP/VNC dependency updates

2026-10-04 00:56:07 +02:00

escapeHtml.js

Enhance security and input validation across CDAP and organization routes

2026-07-09 21:16:55 +02:00

generatorBuildTypes.js

fix(generator): show leftover download pages so they can be deleted

2026-09-11 12:24:24 +02:00

goApiPath.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

goApiProxy.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

linuxServerBinaryDeploy.js

fix(updates): harden Go binary rebuild version and backup path

2026-09-18 10:18:35 +02:00

linuxSystemdUnitPrivileged.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

logger.js

feat(ci): add frontend JavaScript syntax check to CI workflow

2026-08-05 23:12:34 +02:00

logRedact.js

security(3.4): harden console and Go server for pre-release audit

2026-07-12 20:44:46 +02:00

managementCapabilities.js

feat: add BetterDesk management capabilities

2026-09-18 20:45:57 +02:00

multerCleanup.js

fix(security): close remaining CodeQL findings before 3.5.5

2026-10-17 16:32:23 +02:00

oidcRedirectUrl.js

fix(oidc): proxy panel callback so RustDesk SSO leaves Waiting (#304)

2026-07-25 08:43:16 +02:00

parseTrustProxy.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.js

fix: honour CAP_NET_BIND_SERVICE for native HTTPS on :443 (#219)

2026-07-14 18:00:25 +02:00

privilegedUpdateHelper.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

productVersion.js

Prepare stable 3.3.0 release: i18n, changelog, VERSION deploy.

2026-06-12 06:07:22 +02:00

remoteViewerPrefs.js

feat: support FPS modes in web sessions

2026-09-12 18:50:06 +02:00

safePath.js

fix(installer): harden cross-platform lifecycle reliability

2026-08-15 21:50:47 +02:00

safeSqlIdent.js

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

sessionMediaSync.js

feat: enhance multi-session viewer functionality

2026-06-14 10:09:59 +02:00

smtpSettingsHandlers.js

feat: add email notification system and SMTP configuration

2026-06-14 09:04:04 +02:00

ssrfGuard.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

stripUntilStable.js

fix(security): enhance path validation and rate limiting for file access

2026-06-11 18:33:14 +02:00

tokenHash.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.js

feat(update): use commit-bound Go server artifacts

2026-08-23 20:56:45 +02:00

updateProjectRoot.js

fix(windows): avoid drive-root PROJECT_ROOT breaking panel updates (Refs #272)

2026-07-16 19:38:29 +02:00

updateResultStore.js

fix: clear stale update results and improve update handling

2026-06-10 04:26:18 +02:00