coolify

mirror of https://github.com/tiennm99/coolify.git synced 2026-07-10 11:03:23 +00:00

Files

T

Andras Bacsai fcd574e1eb fix(log-drain): prevent command injection by base64-encoding environment variables

Replace direct shell interpolation of environment values with base64 encoding
to prevent command injection attacks. Environment configuration is now built as
a single string, base64-encoded, then decoded to file atomically.

Also add regex validation to restrict environment field values to safe
characters (alphanumeric, underscore, hyphen, dot) at the application layer.

Fixes GHSA-3xm2-hqg8-4m2p

2026-03-10 22:22:51 +01:00

Browser

test: add dashboard test and improve browser test coverage

2026-02-11 16:37:40 +01:00

Feature

fix(sentinel): add token validation to prevent command injection

2026-03-10 22:19:19 +01:00

Traits

test: setup database for upcoming tests

2024-12-04 12:43:52 +01:00

Unit

fix(log-drain): prevent command injection by base64-encoding environment variables