Andras Bacsai e36ae82d9d fix(validation): allow quoted shell args in docker options ...

Permit single-quoted arguments in SHELL_SAFE_COMMAND_PATTERN while
keeping dangerous metacharacters blocked, and add security test cases
for quoted --entrypoint and --hostname values.

2026-04-08 14:21:49 +02:00

..

Proxy

Make proxy restart run as background job to prevent localhost lockout

2025-12-03 10:30:12 +01:00

Service

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

Subscription

feat(subscription): add billing interval to price preview

2026-03-27 19:05:13 +01:00

ActivityMonitorCrossTeamTest.php

refactor: simplify remote process chain and harden ActivityMonitor

2026-03-26 13:26:16 +01:00

AdminAccessAuthorizationTest.php

refactor: move admin route into middleware group and harden authorization

2026-03-28 12:24:40 +01:00

ApiTokenPermissionTest.php

fix(api): require write permission for validation endpoints

2026-03-10 22:11:52 +01:00

ApplicationBuildpackCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

ApplicationHealthCheckApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ApplicationRedirectTest.php

fix(application): persist redirect value in setRedirect

2026-03-29 20:50:03 +02:00

ApplicationRollbackTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ApplicationSourceLocalhostKeyTest.php

fix(application-source): support localhost key with id=0

2026-03-09 17:20:33 +01:00

BackupRetentionAndStaleDetectionTest.php

fix(backups): enforce retention and clean up stale executions

2026-04-03 11:33:21 +02:00

BuildpackSwitchCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

CaCertificateCommandInjectionTest.php

chore: prepare for PR

2026-02-25 12:00:24 +01:00

CheckTraefikVersionJobTest.php

Fix Traefik email notification with clickable server links

2025-12-02 13:08:40 +01:00

CleanupRedisTest.php

fix(CleanupRedisTest): update mock return values for hgetall to reflect job processing state

2025-11-11 23:17:25 +01:00

CleanupUnreachableServersTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

ClonePersistentVolumeUuidTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

CloudInitScriptTest.php

feat: add cloud-init script support for Hetzner server creation

2025-10-10 19:37:16 +02:00

CloudProviderTokenApiTest.php

feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner

2025-12-11 12:12:43 +01:00

CmdHealthCheckValidationTest.php

fix(health-checks): sanitize and validate CMD healthcheck commands

2026-02-25 11:28:33 +01:00

CommandInjectionSecurityTest.php

fix(validation): allow quoted shell args in docker options

2026-04-08 14:21:49 +02:00

ComposePreviewFqdnTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ConvertArraysTest.php

fix: check if array is associative or not

2024-09-03 17:04:56 +02:00

ConvertContainerEnvsToArray.php

chore(tests): update test environment database name and add new feature test for converting container environment variables to array

2025-05-22 14:30:16 +02:00

ConvertingGitUrlsTest.php

fix: add tests for git url converts

2024-11-12 11:32:18 +01:00

CoolifyTaskRetryTest.php

feat(jobs): improve scheduled tasks with retry logic and queue cleanup

2025-11-10 11:11:18 +01:00

CrossTeamIdorLogsTest.php

Squashed commit from '565g-9j4m-wqmr-cross-team-idor-logs-fix'

2026-03-10 22:11:52 +01:00

CrossTeamIdorServerProjectTest.php

fix(security): enforce team-scoped project/env lookups in onboarding

2026-03-29 15:55:03 +02:00

DatabaseBackupCreationApiTest.php

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

DatabaseBackupJobTest.php

fix(backup): prevent notification failures from affecting backup status

2026-03-25 12:43:47 +01:00

DatabaseEnvironmentVariableApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DatabaseImportCommandInjectionTest.php

fix(livewire): add Locked attributes and consolidate container name validation

2026-03-25 20:21:39 +01:00

DatabasePublicPortTimeoutApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DatabaseSslStatusRefreshTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

DeletesUserSessionsTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

DeploymentByUuidApiTest.php

fix(api): cast teamId to int in deployment authorization check

2026-03-12 13:25:10 +01:00

DeploymentCancellationApiTest.php

Changes auto-committed by Conductor

2025-10-16 11:01:58 +02:00

DeploymentCommandContainerResolutionTest.php

refactor(jobs): extract container resolution logic for deployment commands

2026-03-25 14:09:07 +01:00

DockerCleanupJobTest.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

DockerCustomCommandsTest.php

chore: prepare for PR

2026-03-01 18:49:40 +01:00

DockerImagePreviewDeploymentApiTest.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

DomainsByServerApiTest.php

fix(api): validate server ownership in domains endpoint and scope activity lookups

2026-03-25 16:20:53 +01:00

EmailChangeVerificationTest.php

refactor: use random_int() for email change verification codes

2026-03-28 12:25:54 +01:00

EnvironmentVariableBulkCommentApiTest.php

feat(api): support comments in bulk environment variable endpoints

2026-03-19 22:17:55 +01:00

EnvironmentVariableCommentTest.php

fix: update success message logic to only show when changes are made

2025-12-27 15:24:09 +01:00

EnvironmentVariableMassAssignmentTest.php

refactor: add explicit fillable array to EnvironmentVariable model

2025-12-27 15:24:09 +01:00

EnvironmentVariableMultilineToggleViewTest.php

fix(project): handle slash branches in public repo URLs

2026-04-01 09:11:56 +02:00

EnvironmentVariableSharedSpacingTest.php

test: add tests for shared environment variable spacing and resolution

2025-11-27 10:45:39 +01:00

EnvironmentVariableUpdateApiTest.php

fix(api): extract resource UUIDs from route parameters

2026-03-19 21:56:58 +01:00

ExecuteContainerCommandTest.php

test: setup database for upcoming tests

2024-12-04 12:43:52 +01:00

GenerateApplicationNameTest.php

feat(storage): add storage endpoints and UUID support for databases and services

2026-03-23 15:15:02 +01:00

GetLogsCommandInjectionTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

GithubAppsListApiTest.php

Changes auto-committed by Conductor

2025-10-16 13:19:05 +02:00

GithubPrivateRepositoryTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

GithubSourceChangeTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubSourceCreateTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubWebhookTest.php

fix(github-webhook): handle unsupported event types gracefully

2026-03-23 21:33:40 +01:00

HetznerApiTest.php

Fix: Correctly set session for team before creating user token

2025-12-11 11:59:59 +01:00

HetznerServerCreationTest.php

fix: update boarding flow logic to complete onboarding when server is created

2025-10-29 23:06:39 +01:00

InternalModelCreationMassAssignmentTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

IpAllowlistTest.php

chore: prepare for PR

2026-03-03 16:43:29 +01:00

LogFontStylingTest.php

fix(database): refresh SSL/status state and harden clone writes

2026-03-31 09:29:36 +02:00

LoginRateLimitIPTest.php

rate limit test

2025-10-28 15:18:28 +01:00

MassAssignmentProtectionTest.php

refactor(models): add fillable attributes for database configuration options

2026-03-30 08:11:23 +02:00

ModelFillableCreationTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

MultilineEnvironmentVariableTest.php

chore: prepare for PR

2026-02-23 14:28:28 +01:00

PasswordVisibilityComponentTest.php

feat(forms): make textarea monospace opt-in and improve multiline toggle

2026-03-31 15:37:42 +02:00

PreviewEnvVarFallbackTest.php

feat(preview-env): add production variable fallback for docker-compose

2026-03-25 13:26:50 +01:00

PublicGitRepositoryBranchParsingTest.php

fix(project): handle slash branches in public repo URLs

2026-04-01 09:11:56 +02:00

PushServerUpdateJobLastOnlineTest.php

chore: prepare for PR

2026-03-10 18:34:37 +01:00

PushServerUpdateJobOptimizationTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

PushServerUpdateJobTest.php

chore: prepare for PR

2026-02-15 13:43:08 +01:00

RealtimeTerminalPackagingTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

ResetPasswordUrlTest.php

refactor: simplify TrustHosts middleware and use APP_URL as base_url fallback

2026-03-28 12:12:48 +01:00

ResourceOperationsCrossTenantTest.php

chore: prepare for PR

2026-02-25 11:18:46 +01:00

ScheduledJobManagerShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ScheduledJobManagerStaleLockTest.php

chore: prepare for PR

2026-02-25 12:07:29 +01:00

ScheduledJobMonitoringTest.php

fix(jobs): prevent non-due jobs firing on restart and enrich skip logs with resource links

2026-02-28 18:03:29 +01:00

ScheduledTaskApiTest.php

test(factories): add missing model factories for app test suite

2026-03-03 09:50:05 +01:00

SecureCookieAutoDetectionTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

SentinelTokenValidationTest.php

fix(sentinel): add token validation to prevent command injection

2026-03-10 22:19:19 +01:00

SentinelUpdateCheckIndependenceTest.php

Refactor: Move sentinel update checks to ServerManagerJob and add tests for hourly dispatch

2025-12-04 14:58:18 +01:00

ServerIpUniquenessTest.php

fix(server): improve IP uniqueness validation with team-specific error messages

2026-02-12 08:10:59 +01:00

ServerLimitCheckJobTest.php

fix(server-limit): re-enable force-disabled servers at limit

2026-03-03 17:03:59 +01:00

ServerManagerJobShouldRunNowTest.php

refactor(scheduler): extract cron scheduling logic to shared helper

2026-03-23 10:37:49 +01:00

ServerMetadataTest.php

feat(server): auto-fetch server metadata after validation

2026-03-13 17:07:50 +01:00

ServerPatchCheckNotificationTest.php

test: fix ServerPatchCheckNotification tests to avoid global state pollution

2025-10-26 21:54:55 +01:00

ServerSettingSentinelRestartTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerSettingWasChangedTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerStorageCheckIndependenceTest.php

Fix: Correct time inconsistency in ServerStorageCheckIndependenceTest

2025-12-03 10:22:09 +01:00

ServerValidationXssTest.php

fix: sanitize error output in server validation logs

2026-03-26 18:36:36 +01:00

ServiceContainerLabelEscapeApiTest.php

feat(service): add container label escape control to services API

2026-03-13 13:32:58 +01:00

ServiceDatabaseTeamTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ServiceFqdnUpdatePathTest.php

fix: prevent SERVICE_FQDN/SERVICE_URL path duplication on FQDN updates

2025-11-27 10:57:24 +01:00

ServiceMagicVariableOverwriteTest.php

test(magic-variables): add feature tests for SERVICE_URL/FQDN variable handling

2026-03-11 17:15:17 +01:00

SettingsUpdatesAuthorizationTest.php

fix(settings): require instance admin authorization for updates page

2026-03-25 19:33:51 +01:00

SharedVariableComposeResolutionTest.php

fix(parsers): resolve shared variables in compose environment

2026-03-12 13:23:13 +01:00

SharedVariableDevViewTest.php

fix(shared-variables): support direct mount params and comment field for server variables

2026-03-31 14:58:01 +02:00

SslCertificateRegenerationTest.php

fix(database): auto-generate missing CA cert on SSL regeneration

2026-03-30 13:10:49 +02:00

StartDatabaseProxyTest.php

fix(proxy): add validation and normalization for database proxy timeout

2026-03-10 09:59:19 +01:00

StartupExecutionCleanupTest.php

feat(Cleanup): implement failure marking for stuck scheduled tasks and database backups during startup

2025-11-11 12:32:52 +01:00

StorageApiTest.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

TeamInvitationCsrfProtectionTest.php

refactor: split invitation endpoint into GET (show) and POST (accept)

2026-03-26 14:30:27 +01:00

TeamInvitationEmailNormalizationTest.php

refactor(ui): improve styling and consistency in environment variable warning and docker cleanup components

2025-09-25 11:45:07 +02:00

TeamInvitationPrivilegeEscalationTest.php

fix: critical privilege escalation in team invitation system

2025-10-15 11:42:25 +02:00

TeamNotificationCheckTest.php

chore: prepare for PR

2026-02-23 13:02:06 +01:00

TeamPolicyTest.php

fix: add authentication context to TeamPolicyTest

2025-10-15 15:08:35 +02:00

TeamServerLimitTest.php

refactor(team): make server limit methods accept optional team parameter

2026-03-23 21:56:50 +01:00

TerminalAuthIpsRouteTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

TerminalAuthRoutesAuthorizationTest.php

fix(terminal): apply authorization middleware to terminal bootstrap routes

2026-03-25 16:56:37 +01:00

TwoFactorChallengeAccessTest.php

chore: prepare for PR

2026-02-24 10:17:16 +01:00

Utf8HandlingTest.php

feat(utf8-handling): implement UTF-8 sanitization for command outputs and enhance error handling in logs processing

2025-06-05 14:27:39 +02:00