UNITRONIX c2e0e2e784 fix(security): harden CodeQL findings across console and Go server ...

Address GitHub code scanning alerts with OIDC SSRF guards, confined path
helpers, safer client routing, branding sanitization, upload rate limits,
and CodeQL config exclusions for dev-only and protocol-intentional hashes.

2026-06-11 06:57:58 +02:00

..

agentBuildWorker.rebuild.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

agentBundleConnection.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

agentBundleSlug.test.js

feat(i18n): add short link functionality and validation messages across multiple languages

2026-06-06 09:18:48 +02:00

auth.routes.test.js

fix(auth): show username collision when LDAP matches local account (#148)

2026-06-07 00:32:03 +02:00

authService.providers.test.js

fix(auth): show username collision when LDAP matches local account (#148)

2026-06-07 00:32:03 +02:00

bodyScalars.test.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

cdap.routes.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00

chatRelay.protocol.test.js

fix: add tag-based dynamic device groups (#140)

2026-05-15 00:57:59 +02:00

consoleDeployGraph.test.js

fix(update): skip repair download for removed console files

2026-06-09 02:31:54 +02:00

consoleNpmInstall.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

dbAdapter.tokenHashMigration.test.js

fix(console): migrate legacy auth.db token_hash on SQLite upgrade (#158)

2026-06-07 00:26:48 +02:00

devices.routes.test.js

feat: Implement user group management and access control

2026-05-18 02:23:57 +02:00

ensureDefaultAdmin.test.js

fix(update): preserve operator config and passwords on upgrade (#158)

2026-06-04 00:13:12 +02:00

envMerge.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

envMergeSubst.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

goApiPath.test.js

fix(security): phase-D Go API ID guards across all proxy routes

2026-06-09 03:13:53 +02:00

goApiProxy.test.js

fix(security): phase-E shared Go API proxy, XSS hardening, audit clamp

2026-06-09 03:22:14 +02:00

helpers.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

i18n.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

linuxEnsureConsoleUser.test.js

fix(update): privileged Go server binary deploy from Linux panel

2026-06-09 01:09:11 +02:00

linuxServerBinaryDeploy.test.js

fix(update): privileged Go server binary deploy from Linux panel

2026-06-09 01:09:11 +02:00

logRedact.test.js

fix(security): phase-A log redaction, font/transfer paths, CI permissions

2026-06-09 02:42:56 +02:00

middleware.auth.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

organizations.routes.test.js

fix(security): phase-D Go API ID guards across all proxy routes

2026-06-09 03:13:53 +02:00

parseTrustProxy.test.js

Fix console crash when TRUST_PROXY=true in .env (#163)

2026-06-05 02:14:40 +02:00

privilegedPorts.test.js

fix(console): avoid EACCES crash when binding HTTPS on port 443 (#173)

2026-06-07 16:29:49 +02:00

rdclient.protocol.test.js

fix(remote): send 2FA code with correct protobuf field (#171)

2026-06-06 14:55:03 +02:00

rustdesk-api.routes.test.js

fix(client-api): populate device_group_name for manual groups (#138)

2026-06-08 00:09:56 +02:00

rustdeskAddressBookSync.test.js

Fix RustDesk folder tag sync

2026-05-18 02:34:38 +02:00

safePath.test.js

fix(security): harden CodeQL findings across console and Go server

2026-06-11 06:57:58 +02:00

security.middleware.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00

serverConnectionConfig.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

ssrfGuard.test.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

tokenHash.test.js

Harden console security and wire fixes into the update flow.

2026-06-06 14:40:51 +02:00

updateFailurePolicy.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateResultStore.test.js

fix: clear stale update results and improve update handling

2026-06-10 04:26:18 +02:00

updateService.agentRebuild.test.js

Complete web console i18n audit and refine server attestation.

2026-06-06 02:36:57 +02:00

updateService.channel.test.js

Add dev/main branching, automated versioning, and update channel switcher.

2026-06-07 16:48:31 +02:00

updateService.consoleSync.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

updateService.docker.test.js

fix: clear stale update banner on Windows and Docker paths

2026-06-11 04:48:38 +02:00

updateService.nonCritical.test.js

feat(update): implement last update result reporting in settings

2026-06-07 15:06:48 +02:00

users.routes.test.js

feat: add user groups management functionality

2026-05-18 23:58:56 +02:00

userSync.test.js

fix(console): sync auth_provider and LDAP login with Go (#148)

2026-06-05 02:24:14 +02:00

validation.test.js

Add tests, i18n updates, chat & remote fixes

2026-03-27 00:34:12 +01:00

wsRelay.security.test.js

Harden bd-mgmt, API key, and WS security

2026-03-29 01:48:14 +01:00