sencho

mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-05 08:27:42 +00:00

Files

T

Anso 73f4bc27c3 fix: contain file-explorer binds into Sencho's system directories (#1484 )

The file-explorer root containment treated only kernel and OS-state paths
(/etc, /proc, /sys, /dev, /run, /var/run) as dangerous. System locations
that hold the executables and libraries Sencho's own runtime depends on,
notably /usr (which contains /usr/local/bin/node, the docker CLI, and the
entrypoint) plus /bin, /sbin, /lib, /lib64, /boot and /root, were left
browsable, writable and chmodable.

A stack author with stack:edit could declare one of these as a bind source,
overwrite a binary, and have a later deploy execute it. Add those locations
to the dangerous-root set so such a bind is never browsable or editable; the
boundary check still permits ordinary host paths whose name merely prefixes a
protected root (for example /usrdata).

2026-06-26 22:39:33 -04:00

scripts

fix(fleet): resolve getSenchoVersion crash in Docker containers (#396 )

2026-04-06 00:44:36 -04:00

src

fix: contain file-explorer binds into Sencho's system directories (#1484 )

2026-06-26 22:39:33 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130 )

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889 )