UNITRONIX c2e0e2e784 fix(security): harden CodeQL findings across console and Go server ...

Address GitHub code scanning alerts with OIDC SSRF guards, confined path
helpers, safer client routing, branding sanitization, upload rate limits,
and CodeQL config exclusions for dev-only and protocol-intentional hashes.

2026-06-11 06:57:58 +02:00

..

bodyScalars.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

consoleDeployGraph.js

fix(update): skip repair download for removed console files

2026-06-09 02:31:54 +02:00

consoleNpmInstall.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

envMerge.js

Add dev/main branching, automated versioning, and update channel switcher.

2026-06-07 16:48:31 +02:00

goApiPath.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

goApiProxy.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

linuxServerBinaryDeploy.js

fix(security): patch CVE-2026-50575 and harden deps, SSRF, shell exec

2026-06-09 02:05:17 +02:00

logRedact.js

fix(security): phase-A log redaction, font/transfer paths, CI permissions

2026-06-09 02:42:56 +02:00

parseTrustProxy.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.js

fix(console): avoid EACCES crash when binding HTTPS on port 443 (#173)

2026-06-07 16:29:49 +02:00

safePath.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

ssrfGuard.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

stripUntilStable.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

tokenHash.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateResultStore.js

fix: clear stale update results and improve update handling

2026-06-10 04:26:18 +02:00