Files
coolify/app/Actions/Server
Andras Bacsai fcd574e1eb fix(log-drain): prevent command injection by base64-encoding environment variables
Replace direct shell interpolation of environment values with base64 encoding
to prevent command injection attacks. Environment configuration is now built as
a single string, base64-encoded, then decoded to file atomically.

Also add regex validation to restrict environment field values to safe
characters (alphanumeric, underscore, hyphen, dot) at the application layer.

Fixes GHSA-3xm2-hqg8-4m2p
2026-03-10 22:22:51 +01:00
..
2026-03-10 18:32:19 +01:00
2026-02-25 12:00:24 +01:00
2025-01-07 15:31:43 +01:00
2024-10-31 18:20:11 +01:00
2025-01-07 15:31:43 +01:00
2024-10-17 22:08:23 +02:00