UNITRONIX 34ef01e17d fix(security): harden TLS defaults, device auth, and update privileges ...

Require stricter client/server TLS options, centralize device auth on agent APIs, constrain Linux privileged update helpers, and harden filebrowser path checks with supporting audit notes.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)

2026-08-15 23:28:03 +02:00

..

bodyScalars.js

fix(security): resolve CodeQL type-confusion and extend query exclusions

2026-06-12 06:19:04 +02:00

consoleDeployGraph.js

fix(update): skip repair download for removed console files

2026-06-09 02:31:54 +02:00

consoleNpmInstall.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

deviceTokenAuth.js

fix(console): share SQLite handle and bump better-sqlite3 for Node 24 (#353)

2026-08-06 01:17:04 +02:00

envMerge.js

feat(org): encrypted peer credential vault for shared address book

2026-08-10 22:18:39 +02:00

escapeHtml.js

Enhance security and input validation across CDAP and organization routes

2026-07-09 21:16:55 +02:00

generatorBuildTypes.js

refactor(agent): enhance session management and input handling

2026-08-06 00:50:02 +02:00

goApiPath.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

goApiProxy.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

linuxServerBinaryDeploy.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

linuxSystemdUnitPrivileged.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

logger.js

feat(ci): add frontend JavaScript syntax check to CI workflow

2026-08-05 23:12:34 +02:00

logRedact.js

security(3.4): harden console and Go server for pre-release audit

2026-07-12 20:44:46 +02:00

oidcRedirectUrl.js

fix(oidc): proxy panel callback so RustDesk SSO leaves Waiting (#304)

2026-07-25 08:43:16 +02:00

parseTrustProxy.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.js

fix: honour CAP_NET_BIND_SERVICE for native HTTPS on :443 (#219)

2026-07-14 18:00:25 +02:00

privilegedUpdateHelper.js

fix(security): harden TLS defaults, device auth, and update privileges

2026-08-15 23:28:03 +02:00

productVersion.js

Prepare stable 3.3.0 release: i18n, changelog, VERSION deploy.

2026-06-12 06:07:22 +02:00

remoteViewerPrefs.js

feat: add keyboard mode selection and reset functionality

2026-07-04 23:19:14 +02:00

safePath.js

fix(installer): harden cross-platform lifecycle reliability

2026-08-15 21:50:47 +02:00

sessionMediaSync.js

feat: enhance multi-session viewer functionality

2026-06-14 10:09:59 +02:00

smtpSettingsHandlers.js

feat: add email notification system and SMTP configuration

2026-06-14 09:04:04 +02:00

ssrfGuard.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

stripUntilStable.js

fix(security): enhance path validation and rate limiting for file access

2026-06-11 18:33:14 +02:00

tokenHash.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.js

fix(windows): avoid drive-root PROJECT_ROOT breaking panel updates (Refs #272)

2026-07-16 19:38:29 +02:00

updateProjectRoot.js

fix(windows): avoid drive-root PROJECT_ROOT breaking panel updates (Refs #272)

2026-07-16 19:38:29 +02:00

updateResultStore.js

fix: clear stale update results and improve update handling

2026-06-10 04:26:18 +02:00