fix(databases): restrict database updates to allowed fields only

- Modified the update_by_uuid method to use only the specified allowed fields from the request for database updates, enhancing data integrity and security.
This commit is contained in:
Andras Bacsai 2025-09-23 11:38:08 +02:00
parent 9ecb1ca011
commit 7f30afb823

View file

@ -580,7 +580,7 @@ public function update_by_uuid(Request $request)
}
// Only update database fields, not backup configuration
$database->update($request->all());
$database->update($request->only($allowedFields));
if ($whatToDoWithDatabaseProxy === 'start') {
StartDatabaseProxy::dispatch($database);