rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(security): add authorization checks for package updates in Livewire components

Browse source
This commit is contained in:
Andras Bacsai 2025-08-22 14:43:18 +02:00
parent 8408205955
commit 37ee6717e9
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Livewire/Server/Security/Patches.php
View file

@ -69,8 +69,9 @@ public function checkForUpdates()
public function updateAllPackages()
{
$this->authorize('update', $this->server);
if (! $this->packageManager || ! $this->osId) {
$this->dispatch('error', message: 'Run “Check for updates” first.');
$this->dispatch('error', message: 'Run "Check for updates" first.');
return;
}
@ -91,6 +92,7 @@ public function updateAllPackages()
public function updatePackage($package)
{
try {
$this->authorize('update', $this->server);
$activity = UpdatePackage::run(server: $this->server, packageManager: $this->packageManager, osId: $this->osId, package: $package);
$this->dispatch('activityMonitor', $activity->id, ServerPackageUpdated::class);
} catch (\Exception $e) {