Pulse Monitor 1156414f70 fix: enforce admin privileges for proxy auth users on write operations ...

addresses GHSA-wmgw-3g78-89xf - proxy authenticated non-admin users now properly receive 403 Forbidden when attempting write operations

- Added RequireAdmin middleware to check proxy auth admin role
- Applied admin checks to node add/update/delete operations
- Applied admin checks to system settings updates
- Applied admin checks to export/import operations
- Applied admin checks to API token regeneration
- Applied admin checks to password changes
- Non-admin proxy auth users now have proper read-only access as documented

2025-08-30 22:30:59 +00:00

..

alerts.go

feat: improve documentation with high-quality screenshots and mock alert history

2025-08-30 11:13:41 +00:00

auth.go

fix: enforce admin privileges for proxy auth users on write operations

2025-08-30 22:30:59 +00:00

config_handlers.go

fix: only apply dev IP workaround when .dev-mode file exists

2025-08-29 16:41:18 +00:00

csrf_store.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

diagnostics.go

feat: enhance diagnostics to show detailed VM disk monitoring issues

2025-08-28 12:48:42 +00:00

frontend_embed.go

fix: node summary tables now appear on initial page load

2025-08-26 16:27:19 +00:00

guest_metadata.go

fix: reload guest metadata after import

2025-08-14 09:51:40 +00:00

middleware.go

fix: prevent 301 redirect to relative path (./) when accessing root without trailing slash (addresses #334)

2025-08-19 18:56:18 +00:00

notifications.go

fix: properly report HTTP errors in webhook tests

2025-08-23 07:33:14 +00:00

rate_limit_config.go

feat: improve screenshots and mobile UI responsiveness

2025-08-30 12:25:53 +00:00

ratelimit.go

feat: add comprehensive security system for API protection

2025-08-06 21:39:52 +00:00

recovery_tokens.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

router.go

fix: enforce admin privileges for proxy auth users on write operations

2025-08-30 22:30:59 +00:00

security_setup_fix.go

fix: enforce admin privileges for proxy auth users on write operations

2025-08-30 22:30:59 +00:00

security.go

fix: iframe embedding checkbox persistence and functionality (addresses #351)

2025-08-28 09:17:54 +00:00

session_store.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

settings.go

fix: ensure consistent CPU core display for all guests

2025-08-09 15:03:28 +00:00

system_settings.go

fix: enforce admin privileges for proxy auth users on write operations

2025-08-30 22:30:59 +00:00

types.go

improve: comprehensive type safety improvements across codebase

2025-08-19 21:32:44 +00:00

updates.go

fix: complete update system improvements

2025-08-07 11:43:40 +00:00