UNITRONIX 77bce0f49d fix(client-api): wire RustDesk routes and lock down pro role (#138) ...

Register missing Go client-compat endpoints (server-key, software, user
groups, strategies, audit, peer-key), enforce audit.view on audit GET
routes, and align admin checks with global_admin.

The pro (API-only) role now has zero device permissions: no inventory,
folder/group sidebar, peer keys, or server-side AB enrichment — it is
intended solely for RustDesk PRO activation in the desktop client.

Refs #138

2026-06-05 23:32:32 +02:00

..

auth.js

fix(client-api): wire RustDesk routes and lock down pro role (#138)

2026-06-05 23:32:32 +02:00

csrf.js

fix: resolve 8 GitHub issues (#90 #97 #100 #82 #78 #75 #98 #68)

2026-04-10 00:00:04 +02:00

goApiProxy.js

fix(api): Go :21114 default API and Node :21121 compat proxy (#160)

2026-06-03 02:16:24 +02:00

i18n.js

fix(api,ui): fix tags/groups, status type, operator permissions (#138)

2026-05-28 01:46:19 +02:00

rateLimiter.js

security: apply 12 audit fixes (H-03/H-04/M-03/M-04/M-05/M-06/M-07/L-01/L-02/L-04/I-02/I-04)

2026-05-26 13:58:16 +02:00

security.js

fix(security): remove non-standard browsing-topics from Permissions-Policy

2026-05-27 01:02:00 +02:00

wanSecurity.js

feat(installers): run services under unprivileged accounts by default

2026-05-31 00:35:28 +02:00

wsOrigin.js

security: fix 3 critical + 3 high findings from production audit

2026-05-26 13:35:12 +02:00