Andras Bacsai 0633b543ee feat(api): require POST for state-changing endpoints ...

Make start/stop/restart, deploy, enable/disable, and server validate
POST-only, with GET returning 405. Server validate accepts optional
install and uses ValidateAndInstallServerJob. Update OpenAPI and tests.

2026-07-19 11:42:04 +02:00

..

ApiSensitiveFieldsTest.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

ApiTokenCreationSecurityTest.php

fix(security): prevent snapshot replay in API token permission checks

2026-02-27 22:58:44 +01:00

AuditLogTest.php

feat(api): require POST for state-changing endpoints

2026-07-19 11:42:04 +02:00

CaCertificateCommandInjectionTest.php

chore(tests): reorganize feature suites and expand team auth coverage

2026-02-26 07:13:19 +01:00

CloudInitScriptsTest.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

CloudProviderTokenFormTest.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

CloudProviderTokenShowTest.php

feat(security): add editable cloud credential pages

2026-07-08 12:58:27 +02:00

CmdHealthCheckValidationTest.php

chore(tests): reorganize feature suites and expand team auth coverage

2026-02-26 07:13:19 +01:00

CommandInjectionSecurityTest.php

fix(docker): escape container status commands

2026-07-07 18:00:40 +02:00

GithubAppSetupCallbackTest.php

fix(github): derive app API URLs from HTML hosts

2026-06-09 18:31:06 +02:00

IpAllowlistTest.php

Merge remote-tracking branch 'origin/next' into harden-database-import-files

2026-06-29 10:35:35 +02:00

PrivateKeyDropdownTest.php

feat(server): improve private key and cloud link flows

2026-07-08 13:35:09 +02:00

TrustHostsMiddlewareTest.php

Merge remote-tracking branch 'origin/next' into harden-database-import-files

2026-06-29 10:35:35 +02:00