UNITRONIX c2aedb10fe Enhance security and input validation across CDAP and organization routes ...

- Implemented input validation for `orgId` and `deviceId` in CDAP and organization detail routes using `assertSafeApiId`, returning a 400 error for invalid inputs.
- Added HTML escaping for `deviceId` and `orgId` in views to prevent XSS vulnerabilities.
- Hardened `patch-role-scope-i18n.js` against prototype pollution with a guard for unsafe nested keys.
- Updated CodeQL configuration to include new exclusions and ensure documented exclusions are applied.

2026-07-09 21:16:55 +02:00

..

bodyScalars.js

fix(security): resolve CodeQL type-confusion and extend query exclusions

2026-06-12 06:19:04 +02:00

consoleDeployGraph.js

fix(update): skip repair download for removed console files

2026-06-09 02:31:54 +02:00

consoleNpmInstall.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

envMerge.js

Add dev/main branching, automated versioning, and update channel switcher.

2026-06-07 16:48:31 +02:00

escapeHtml.js

Enhance security and input validation across CDAP and organization routes

2026-07-09 21:16:55 +02:00

goApiPath.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

goApiProxy.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

linuxServerBinaryDeploy.js

fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec

2026-06-09 02:05:17 +02:00

linuxSystemdUnitPrivileged.js

fix: rdclient file transfer JS getters and Linux systemd unit updates

2026-06-24 20:19:02 +02:00

logRedact.js

fix(security): phase-A log redaction, font/transfer paths, CI permissions

2026-06-09 02:42:56 +02:00

parseTrustProxy.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.js

fix: Linux HTTP/HTTPS protocol toggle sync and health checks (#219)

2026-06-24 19:16:52 +02:00

productVersion.js

Prepare stable 3.3.0 release: i18n, changelog, VERSION deploy.

2026-06-12 06:07:22 +02:00

remoteViewerPrefs.js

feat: add keyboard mode selection and reset functionality

2026-07-04 23:19:14 +02:00

safePath.js

fix(security): enhance path validation and rate limiting for file access

2026-06-11 18:33:14 +02:00

sessionMediaSync.js

feat: enhance multi-session viewer functionality

2026-06-14 10:09:59 +02:00

smtpSettingsHandlers.js

feat: add email notification system and SMTP configuration

2026-06-14 09:04:04 +02:00

ssrfGuard.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

stripUntilStable.js

fix(security): enhance path validation and rate limiting for file access

2026-06-11 18:33:14 +02:00

tokenHash.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateResultStore.js

fix: clear stale update results and improve update handling

2026-06-10 04:26:18 +02:00