coolify/tests/Feature/Security
Andras Bacsai 0633b543ee feat(api): require POST for state-changing endpoints
Make start/stop/restart, deploy, enable/disable, and server validate
POST-only, with GET returning 405. Server validate accepts optional
install and uses ValidateAndInstallServerJob. Update OpenAPI and tests.
2026-07-19 11:42:04 +02:00
..
ApiSensitiveFieldsTest.php fix(api): expose sensitive fields for privileged tokens 2026-07-07 12:53:34 +02:00
ApiTokenCreationSecurityTest.php fix(security): prevent snapshot replay in API token permission checks 2026-02-27 22:58:44 +01:00
AuditLogTest.php feat(api): require POST for state-changing endpoints 2026-07-19 11:42:04 +02:00
CaCertificateCommandInjectionTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
CloudInitScriptsTest.php feat(security): add editable cloud credential pages 2026-07-08 12:58:27 +02:00
CloudProviderTokenFormTest.php feat(security): add editable cloud credential pages 2026-07-08 12:58:27 +02:00
CloudProviderTokenShowTest.php feat(security): add editable cloud credential pages 2026-07-08 12:58:27 +02:00
CmdHealthCheckValidationTest.php chore(tests): reorganize feature suites and expand team auth coverage 2026-02-26 07:13:19 +01:00
CommandInjectionSecurityTest.php fix(docker): escape container status commands 2026-07-07 18:00:40 +02:00
GithubAppSetupCallbackTest.php fix(github): derive app API URLs from HTML hosts 2026-06-09 18:31:06 +02:00
IpAllowlistTest.php Merge remote-tracking branch 'origin/next' into harden-database-import-files 2026-06-29 10:35:35 +02:00
PrivateKeyDropdownTest.php feat(server): improve private key and cloud link flows 2026-07-08 13:35:09 +02:00
TrustHostsMiddlewareTest.php Merge remote-tracking branch 'origin/next' into harden-database-import-files 2026-06-29 10:35:35 +02:00