3 Commits

Include renames

Author	SHA1	Message	Date
Andras Bacsai	c0c0349880	refactor(models): add fillable attributes for database configuration options ... Add explicit fillable attributes to Service and all Standalone* database models for new configuration options: public_port_timeout, enable_ssl, ssl_mode, is_log_drain_enabled, is_include_timestamps, and custom_docker_run_options. Add tests to MassAssignmentProtectionTest to verify these attributes are properly protected by mass assignment protection across all relevant models.	2026-03-30 08:11:23 +02:00
Andras Bacsai	b3256d4df1	fix(security): harden model assignment and sensitive data handling ... Restrict mass-assignable attributes across user/team/redis models and switch privileged root/team creation paths to forceFill/forceCreate. Encrypt legacy ClickHouse admin passwords via migration and cast the correct ClickHouse password field as encrypted. Tighten API and runtime exposure by removing sensitive team fields from responses and sanitizing Git/compose error messages. Expand security-focused feature coverage for command-injection and mass assignment protections.	2026-03-29 20:56:04 +02:00
Andras Bacsai	67a4fcc2ab	fix: add mass assignment protection to models ... Replace $guarded = [] with explicit $fillable whitelists across all models. Update controllers to use request->only($allowedFields) when assigning request data. Switch Livewire components to forceFill() for explicit mass assignment. Add integration tests for mass assignment protection.	2026-03-28 12:32:57 +01:00