UNITRONIX ad23812c37 fix(security): make GitHub fetch SSRF guard CodeQL-visible ...

Use allowlisted hostname literals with https.get options instead of a
full URL string so request-forgery analysis sees a fixed host.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow); muopc (@muopc)

2026-10-17 16:36:40 +02:00

..

advancedConfigService.js

feat(console): coordinate service restarts and login metadata

2026-09-18 18:26:42 +02:00

agentBundleConnection.js

refactor(agent): enhance session management and input handling

2026-08-06 00:50:02 +02:00

agentBundleService.js

feat(generator): add generic agent releases and QR activation

2026-10-11 00:43:26 +02:00

agentClientBuildWorker.js

Replace CDAP Support Agent generator with BetterDesk Support templates

2026-09-07 01:29:41 +02:00

alertRulesEngine.js

Add Go server and security audit; update web console

2026-03-02 00:43:04 +01:00

authService.js

fix(docker): serialize split admin bootstrap

2026-09-26 02:25:51 +02:00

backupArchive.js

feat(backup): full disaster-recovery backup archive

2026-06-01 05:21:07 +02:00

backupService.js

feat(web): add Auth TOTP and scheduled full backups

2026-10-17 13:31:23 +02:00

bdRelay.js

Add BetterDesk device telemetry and secure API transport

2026-09-12 22:38:26 +02:00

betterdeskApi.js

fix(enrollment): retain signal transport after approval

2026-10-07 15:59:00 +02:00

billingClockConfigService.js

fix(docker): hot-reload billing clock settings in split deployments

2026-09-20 17:26:32 +02:00

brandingService.js

feat(settings): simplify appearance configuration

2026-09-19 11:00:34 +02:00

cdapMediaProxy.js

fix(console): share one WebSocket upgrade dispatcher (#295)

2026-07-22 18:21:50 +02:00

cdapTerminalProxy.js

fix(console): share one WebSocket upgrade dispatcher (#295)

2026-07-22 18:21:50 +02:00

chatRelay.js

fix(console): polish dashboard chat and accessibility

2026-10-03 10:44:20 +02:00

clientBuilderService.js

feat(generator): add generic agent releases and QR activation

2026-10-11 00:43:26 +02:00

clientConfigHost.js

fix(ui): warn on unreachable config QR hosts (#368)

2026-08-17 06:55:04 +02:00

clientTemplateWorker.js

feat(generator): add generic agent releases and QR activation

2026-10-11 00:43:26 +02:00

customTxtBuilder.js

Complete BetterDesk Support generator workflow

2026-09-19 18:53:19 +02:00

database.js

fix(generator): expose generation methods through database facade

2026-10-05 08:18:37 +02:00

databaseSessionStore.js

fix(console): share SQLite handle and bump better-sqlite3 for Node 24 (#353)

2026-08-06 01:17:04 +02:00

dbAdapter.js

security: implement Phase 0-3 remediation (deps, SQL ident, JWT, CSP, suite)

2026-10-17 15:33:48 +02:00

deviceGroupService.js

feat: user scope UX, role labels, and device visibility defaults (#227)

2026-07-05 19:44:18 +02:00

deviceStatusPush.js

fix(console): surface registration notifications and stabilize relay delivery

2026-08-23 15:27:13 +02:00

emailService.js

chore: remove outdated build workflow and update CI configurations

2026-06-20 18:08:54 +02:00

fileTransferService.js

fix(security): phase-A log redaction, font/transfer paths, CI permissions

2026-06-09 02:42:56 +02:00

fontService.js

Refine UX 3.5 shell performance and styling

2026-07-26 21:56:55 +02:00

genericAgentReleaseService.js

feat(generator): add generic agent releases and QR activation

2026-10-11 00:43:26 +02:00

helpRequestEmailService.js

chore: remove outdated build workflow and update CI configurations

2026-06-20 18:08:54 +02:00

i18nService.js

fix(ui): UX 3.5 light topbar, a11y/i18n, and panel polish

2026-09-12 12:30:06 +02:00

keyService.js

fix(keys): encode RustDesk config QR as reversed deploy string

2026-08-14 06:52:41 +02:00

lanDiscovery.js

feat(rdclient): enhance desktop client with server validation, LAN discovery, and settings management

2026-06-14 21:12:41 +02:00

localClientBuilder.js

fix(security): close remaining CodeQL findings before 3.5.5

2026-10-17 16:32:23 +02:00

meshAshxProxy.js

fix(console): share one WebSocket upgrade dispatcher (#295)

2026-07-22 18:21:50 +02:00

networkMonitor.js

chore: update Docker Compose image tags to 3.2.12 and enhance documentation for versioning

2026-06-11 18:36:48 +02:00

panelDiscovery.js

feat(rdclient): enhance desktop client with server validation, LAN discovery, and settings management

2026-06-14 21:12:41 +02:00

platformSupportInstaller.js

Complete BetterDesk Support generator workflow

2026-09-19 18:53:19 +02:00

rdclientBuildWorker.js

Replace CDAP Support Agent generator with BetterDesk Support templates

2026-09-07 01:29:41 +02:00

registrationNotifications.js

fix(console): surface registration notifications and stabilize relay delivery

2026-08-23 15:27:13 +02:00

remoteRelay.js

fix(security): finish privileged update path and relay auth tests

2026-08-15 23:29:01 +02:00

remoteTargetGateway.js

feat(remote): add gated RDP/VNC dependency updates

2026-10-04 00:56:07 +02:00

reportEngine.js

Add Go server and security audit; update web console

2026-03-02 00:43:04 +01:00

restartCoordinator.js

fix(docker): hot-reload billing clock settings in split deployments

2026-09-20 17:26:32 +02:00

rustdeskAddressBookSync.js

fix(security): Address Book ACL filter and legacy role CHECK migration (#342)

2026-08-01 16:53:18 +02:00

rustDeskPublicEndpointsService.js

fix(console): persist Public Client Endpoints across Docker recreate (#291)

2026-07-21 17:32:43 +02:00

scheduledBackupService.js

feat(web): add Auth TOTP and scheduled full backups

2026-10-17 13:31:23 +02:00

serverAttestation.js

feat(attestation): customize server badge labels

2026-09-25 10:59:44 +02:00

serverBackend.js

feat(remote): add gated RDP/VNC dependency updates

2026-10-04 00:56:07 +02:00

serverConnectionConfigService.js

fix(split-docker): unlock connection strategy settings

2026-09-25 00:04:22 +02:00

serverManagement.js

feat: add BetterDesk management capabilities

2026-09-18 20:45:57 +02:00

serverTerminalProxy.js

fix(console): polish dashboard chat and accessibility

2026-10-03 10:44:20 +02:00

supportersService.js

docs: update CHANGELOG for Help panel overhaul and tutorial removal

2026-08-01 23:58:15 +02:00

supportGeneratorModule.js

fix(security): make GitHub fetch SSRF guard CodeQL-visible

2026-10-17 16:36:40 +02:00

updateService.js

fix(security): clear OIDC race, Go CVEs, and CodeQL noise before 3.5.5

2026-10-17 16:21:39 +02:00

userScopeService.js

fix(security): harden update restore and notification CSRF

2026-08-23 21:08:05 +02:00

userSync.js

feat(console): coordinate service restarts and login metadata

2026-09-18 18:26:42 +02:00

windowsSupportInstaller.js

Complete BetterDesk Support generator workflow

2026-09-19 18:53:19 +02:00

wsRelay.js

feat(guest): enforce scoped guest access lifecycle

2026-10-03 10:22:20 +02:00

wsUpgradeRouter.js

fix(console): share one WebSocket upgrade dispatcher (#295)

2026-07-22 18:21:50 +02:00