coolify

mirror of https://github.com/tiennm99/coolify.git synced 2026-08-23 06:24:38 +00:00

Files

T

Andras Bacsai 096d4369e5 fix(sentinel): add token validation to prevent command injection

Add validation to ensure sentinel tokens contain only safe characters
(alphanumeric, dots, hyphens, underscores, plus, forward slash, equals),
preventing OS command injection vulnerabilities when tokens are
interpolated into shell commands.

- Add ServerSetting::isValidSentinelToken() validation method
- Validate tokens in StartSentinel action and metrics queries
- Improve shell argument escaping with escapeshellarg()
- Add comprehensive test coverage for token validation

2026-03-10 22:19:19 +01:00

AuthorizesResourceCreation.php

feat(auth): introduce resource creation authorization middleware and policies for enhanced access control

2025-08-26 10:27:38 +02:00

CalculatesExcludedStatus.php

fix: don't show health status for exited containers

2025-11-24 09:09:37 +01:00

ClearsGlobalSearchCache.php

feat(global-search): integrate projects and environments into global search functionality

2025-09-30 13:37:03 +02:00

DeletesUserSessions.php

Changes auto-committed by Conductor