Andras Bacsai fcd574e1eb fix(log-drain): prevent command injection by base64-encoding environment variables ... Replace direct shell interpolation of environment values with base64 encoding to prevent command injection attacks. Environment configuration is now built as a single string, base64-encoded, then decoded to file atomically. Also add regex validation to restrict environment field values to safe characters (alphanumeric, underscore, hyphen, dot) at the application layer. Fixes GHSA-3xm2-hqg8-4m2p		2026-03-10 22:22:51 +01:00
..
CheckUpdates.php
CleanupDocker.php	chore: prepare for PR	2026-03-10 18:32:19 +01:00
ConfigureCloudflared.php
DeleteServer.php
InstallDocker.php
InstallPrerequisites.php	Add Arch Linux server support and fix package sanitization	2025-12-08 09:02:00 +01:00
ResourcesCheck.php
RestartContainer.php
RunCommand.php
StartLogDrain.php	fix(log-drain): prevent command injection by base64-encoding environment variables	2026-03-10 22:22:51 +01:00
StartSentinel.php	fix(sentinel): add token validation to prevent command injection	2026-03-10 22:19:19 +01:00
StopLogDrain.php
StopSentinel.php
UpdateCoolify.php
UpdatePackage.php
ValidatePrerequisites.php
ValidateServer.php