UNITRONIX 7b938d8c7b fix(security): harden path confinement, SSRF, and shell exec ...

Add shared safePath helper for file browser, i18n, and backup paths;
use validated OIDC discovery URLs; restrict terminal shells and
network monitor HTTP requests. Remove obsolete one-time i18n migration
scripts already merged into lang/*.json.

2026-06-09 02:21:43 +02:00

..

agentBuildWorker.rebuild.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

agentBundleConnection.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

agentBundleSlug.test.js

feat(i18n): add short link functionality and validation messages across multiple languages

2026-06-06 09:18:48 +02:00

auth.routes.test.js

fix(auth): show username collision when LDAP matches local account (#148)

2026-06-07 00:32:03 +02:00

authService.providers.test.js

fix(auth): show username collision when LDAP matches local account (#148)

2026-06-07 00:32:03 +02:00

cdap.routes.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00

chatRelay.protocol.test.js

fix: add tag-based dynamic device groups (#140)

2026-05-15 00:57:59 +02:00

consoleDeployGraph.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

consoleNpmInstall.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

dbAdapter.tokenHashMigration.test.js

fix(console): migrate legacy auth.db token_hash on SQLite upgrade (#158)

2026-06-07 00:26:48 +02:00

devices.routes.test.js

feat: Implement user group management and access control

2026-05-18 02:23:57 +02:00

ensureDefaultAdmin.test.js

fix(update): preserve operator config and passwords on upgrade (#158)

2026-06-04 00:13:12 +02:00

envMerge.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

envMergeSubst.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

helpers.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

i18n.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

linuxEnsureConsoleUser.test.js

fix(update): privileged Go server binary deploy from Linux panel

2026-06-09 01:09:11 +02:00

linuxServerBinaryDeploy.test.js

fix(update): privileged Go server binary deploy from Linux panel

2026-06-09 01:09:11 +02:00

middleware.auth.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

organizations.routes.test.js

Fix user recovery after update

2026-05-09 01:02:00 +02:00

parseTrustProxy.test.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.test.js

fix(console): avoid EACCES crash when binding HTTPS on port 443 (#173)

2026-06-07 16:29:49 +02:00

rdclient.protocol.test.js

fix(remote): send 2FA code with correct protobuf field (#171)

2026-06-06 14:55:03 +02:00

rustdesk-api.routes.test.js

fix(client-api): populate device_group_name for manual groups (#138)

2026-06-08 00:09:56 +02:00

rustdeskAddressBookSync.test.js

Fix RustDesk folder tag sync

2026-05-18 02:34:38 +02:00

safePath.test.js

fix(security): harden path confinement, SSRF, and shell exec

2026-06-09 02:21:43 +02:00

security.middleware.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00

serverConnectionConfig.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

ssrfGuard.test.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

tokenHash.test.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateResultStore.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateService.agentRebuild.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

updateService.channel.test.js

Add dev/main branching, automated versioning, and update channel switcher.

2026-06-07 16:48:31 +02:00

updateService.consoleSync.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateService.docker.test.js

fix(update): disable in-app updates for Docker GHCR deployments (#158)

2026-06-06 14:09:57 +02:00

updateService.nonCritical.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

users.routes.test.js

feat: add user groups management functionality

2026-05-18 23:58:56 +02:00

userSync.test.js

fix(console): sync auth_provider and LDAP login with Go (#148)

2026-06-05 02:24:14 +02:00

validation.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

wsRelay.security.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00