Andras Bacsai 8a164735cb fix(api): extract resource UUIDs from route parameters ...

Extract resource UUIDs from route parameters instead of request body
in ApplicationsController and ServicesController environment variable
endpoints. This prevents UUID parameters from being spoofed in the
request body.

- Replace $request->uuid with $request->route('uuid')
- Replace $request->env_uuid with $request->route('env_uuid')
- Add tests verifying route parameters are used and body UUIDs ignored

2026-03-19 21:56:58 +01:00

..

Proxy

Make proxy restart run as background job to prevent localhost lockout

2025-12-03 10:30:12 +01:00

Service

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

Subscription

fix(stripe): add error handling and resilience to subscription operations (#9030)

2026-03-18 15:38:59 +01:00

ApiTokenPermissionTest.php

fix(api): require write permission for validation endpoints

2026-03-10 22:11:52 +01:00

ApplicationBuildpackCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

ApplicationHealthCheckApiTest.php

feat(healthchecks): add command health checks with input validation

2026-02-25 11:38:09 +01:00

ApplicationRollbackTest.php

feat(git-import): support custom ssh command for fetch, submodule, and lfs

2026-03-12 13:32:43 +01:00

ApplicationSourceLocalhostKeyTest.php

fix(application-source): support localhost key with id=0

2026-03-09 17:20:33 +01:00

BuildpackSwitchCleanupTest.php

refactor: move buildpack cleanup logic to model lifecycle hooks

2025-11-18 10:29:08 +01:00

CaCertificateCommandInjectionTest.php

chore: prepare for PR

2026-02-25 12:00:24 +01:00

CheckTraefikVersionJobTest.php

Fix Traefik email notification with clickable server links

2025-12-02 13:08:40 +01:00

CleanupRedisTest.php

fix(CleanupRedisTest): update mock return values for hgetall to reflect job processing state

2025-11-11 23:17:25 +01:00

CleanupUnreachableServersTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

CloudInitScriptTest.php

feat: add cloud-init script support for Hetzner server creation

2025-10-10 19:37:16 +02:00

CloudProviderTokenApiTest.php

feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner

2025-12-11 12:12:43 +01:00

CmdHealthCheckValidationTest.php

fix(health-checks): sanitize and validate CMD healthcheck commands

2026-02-25 11:28:33 +01:00

CommandInjectionSecurityTest.php

Squashed commit from 'qqrq-r9h4-x6wp-authenticated-rce'

2026-03-18 13:53:01 +01:00

ComposePreviewFqdnTest.php

feat(compose-preview): populate fqdn from docker_compose_domains

2026-03-13 17:02:05 +01:00

ConvertArraysTest.php

…

ConvertContainerEnvsToArray.php

chore(tests): update test environment database name and add new feature test for converting container environment variables to array

2025-05-22 14:30:16 +02:00

ConvertingGitUrlsTest.php

fix: add tests for git url converts

2024-11-12 11:32:18 +01:00

CoolifyTaskRetryTest.php

feat(jobs): improve scheduled tasks with retry logic and queue cleanup

2025-11-10 11:11:18 +01:00

CrossTeamIdorLogsTest.php

Squashed commit from '565g-9j4m-wqmr-cross-team-idor-logs-fix'

2026-03-10 22:11:52 +01:00

DatabaseBackupCreationApiTest.php

feat: Implement required port validation for service applications

2025-11-06 14:32:36 +01:00

DatabaseBackupJobTest.php

feat(backup): enhance backup job with S3 upload handling and notifications

2025-10-07 15:02:23 +02:00

DeletesUserSessionsTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

DeploymentByUuidApiTest.php

fix(api): cast teamId to int in deployment authorization check

2026-03-12 13:25:10 +01:00

DeploymentCancellationApiTest.php

Changes auto-committed by Conductor

2025-10-16 11:01:58 +02:00

DockerCustomCommandsTest.php

chore: prepare for PR

2026-03-01 18:49:40 +01:00

DomainsByServerApiTest.php

chore: prepare for PR

2026-02-25 11:52:18 +01:00

EnvironmentVariableCommentTest.php

fix: update success message logic to only show when changes are made

2025-12-27 15:24:09 +01:00

EnvironmentVariableMassAssignmentTest.php

refactor: add explicit fillable array to EnvironmentVariable model

2025-12-27 15:24:09 +01:00

EnvironmentVariableSharedSpacingTest.php

test: add tests for shared environment variable spacing and resolution

2025-11-27 10:45:39 +01:00

EnvironmentVariableUpdateApiTest.php

fix(api): extract resource UUIDs from route parameters

2026-03-19 21:56:58 +01:00

ExecuteContainerCommandTest.php

test: setup database for upcoming tests

2024-12-04 12:43:52 +01:00

GithubAppsListApiTest.php

Changes auto-committed by Conductor

2025-10-16 13:19:05 +02:00

GithubSourceChangeTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

GithubSourceCreateTest.php

fix: GitHub source creation and configuration issues

2025-10-25 10:49:09 +02:00

HetznerApiTest.php

Fix: Correctly set session for team before creating user token

2025-12-11 11:59:59 +01:00

HetznerServerCreationTest.php

fix: update boarding flow logic to complete onboarding when server is created

2025-10-29 23:06:39 +01:00

IpAllowlistTest.php

chore: prepare for PR

2026-03-03 16:43:29 +01:00

LoginRateLimitIPTest.php

rate limit test

2025-10-28 15:18:28 +01:00

MultilineEnvironmentVariableTest.php

chore: prepare for PR

2026-02-23 14:28:28 +01:00

PushServerUpdateJobLastOnlineTest.php

chore: prepare for PR

2026-03-10 18:34:37 +01:00

PushServerUpdateJobOptimizationTest.php

feat(jobs): optimize async job dispatches and enhance Stripe subscription sync

2026-02-28 13:18:44 +01:00

PushServerUpdateJobTest.php

chore: prepare for PR

2026-02-15 13:43:08 +01:00

RealtimeTerminalPackagingTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

ResourceOperationsCrossTenantTest.php

chore: prepare for PR

2026-02-25 11:18:46 +01:00

ScheduledJobManagerShouldRunNowTest.php

fix(jobs): prevent non-due jobs firing on restart and enrich skip logs with resource links

2026-02-28 18:03:29 +01:00

ScheduledJobManagerStaleLockTest.php

chore: prepare for PR

2026-02-25 12:07:29 +01:00

ScheduledJobMonitoringTest.php

fix(jobs): prevent non-due jobs firing on restart and enrich skip logs with resource links

2026-02-28 18:03:29 +01:00

ScheduledTaskApiTest.php

test(factories): add missing model factories for app test suite

2026-03-03 09:50:05 +01:00

SecureCookieAutoDetectionTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

SentinelTokenValidationTest.php

fix(sentinel): add token validation to prevent command injection

2026-03-10 22:19:19 +01:00

SentinelUpdateCheckIndependenceTest.php

Refactor: Move sentinel update checks to ServerManagerJob and add tests for hourly dispatch

2025-12-04 14:58:18 +01:00

ServerIpUniquenessTest.php

fix(server): improve IP uniqueness validation with team-specific error messages

2026-02-12 08:10:59 +01:00

ServerLimitCheckJobTest.php

fix(server-limit): re-enable force-disabled servers at limit

2026-03-03 17:03:59 +01:00

ServerMetadataTest.php

feat(server): auto-fetch server metadata after validation

2026-03-13 17:07:50 +01:00

ServerPatchCheckNotificationTest.php

test: fix ServerPatchCheckNotification tests to avoid global state pollution

2025-10-26 21:54:55 +01:00

ServerSettingSentinelRestartTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerSettingWasChangedTest.php

Changes auto-committed by Conductor

2025-10-16 09:51:37 +02:00

ServerStorageCheckIndependenceTest.php

Fix: Correct time inconsistency in ServerStorageCheckIndependenceTest

2025-12-03 10:22:09 +01:00

ServiceContainerLabelEscapeApiTest.php

feat(service): add container label escape control to services API

2026-03-13 13:32:58 +01:00

ServiceDatabaseTeamTest.php

fix(service): resolve team lookup via service relationship

2026-02-23 13:23:12 +01:00

ServiceFqdnUpdatePathTest.php

fix: prevent SERVICE_FQDN/SERVICE_URL path duplication on FQDN updates

2025-11-27 10:57:24 +01:00

ServiceMagicVariableOverwriteTest.php

test(magic-variables): add feature tests for SERVICE_URL/FQDN variable handling

2026-03-11 17:15:17 +01:00

SharedVariableComposeResolutionTest.php

fix(parsers): resolve shared variables in compose environment

2026-03-12 13:23:13 +01:00

SharedVariableDevViewTest.php

chore: prepare for PR

2026-03-11 06:36:12 +01:00

StartDatabaseProxyTest.php

fix(proxy): add validation and normalization for database proxy timeout

2026-03-10 09:59:19 +01:00

StartupExecutionCleanupTest.php

feat(Cleanup): implement failure marking for stuck scheduled tasks and database backups during startup

2025-11-11 12:32:52 +01:00

TeamInvitationEmailNormalizationTest.php

refactor(ui): improve styling and consistency in environment variable warning and docker cleanup components

2025-09-25 11:45:07 +02:00

TeamInvitationPrivilegeEscalationTest.php

fix: critical privilege escalation in team invitation system

2025-10-15 11:42:25 +02:00

TeamNotificationCheckTest.php

chore: prepare for PR

2026-02-23 13:02:06 +01:00

TeamPolicyTest.php

fix: add authentication context to TeamPolicyTest

2025-10-15 15:08:35 +02:00

TerminalAuthIpsRouteTest.php

chore: prepare for PR

2026-03-10 20:37:22 +01:00

TrustHostsMiddlewareTest.php

fix(subscription): harden quantity updates and proxy trust behavior

2026-03-03 12:28:16 +01:00

TwoFactorChallengeAccessTest.php

chore: prepare for PR

2026-02-24 10:17:16 +01:00

Utf8HandlingTest.php

feat(utf8-handling): implement UTF-8 sanitization for command outputs and enhance error handling in logs processing

2025-06-05 14:27:39 +02:00