UNITRONIX 97492d6005 fix(security): validate Go API paths and file browser entries ...

Add goApiPath guard on betterdeskApi axios requests, sanitize org/device
IDs in policy routes, and confine server-management directory listings
with resolveChildPath.

2026-06-09 02:46:22 +02:00

..

consoleDeployGraph.js

fix(update): skip repair download for removed console files

2026-06-09 02:31:54 +02:00

consoleNpmInstall.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

envMerge.js

Add dev/main branching, automated versioning, and update channel switcher.

2026-06-07 16:48:31 +02:00

goApiPath.js

fix(security): validate Go API paths and file browser entries

2026-06-09 02:46:22 +02:00

linuxServerBinaryDeploy.js

fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec

2026-06-09 02:05:17 +02:00

logRedact.js

fix(security): phase-A log redaction, font/transfer paths, CI permissions

2026-06-09 02:42:56 +02:00

parseTrustProxy.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.js

fix(console): avoid EACCES crash when binding HTTPS on port 443 (#173)

2026-06-07 16:29:49 +02:00

safePath.js

fix(security): harden path confinement, SSRF, and shell exec

2026-06-09 02:21:43 +02:00

ssrfGuard.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

tokenHash.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateResultStore.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00