Andras Bacsai 103d5b6c06 fix: sanitize error output in server validation logs ... Escape dynamic error messages with htmlspecialchars() before concatenating into HTML strings stored in validation_logs. Add a Purify-based mutator on Server model as defense-in-depth, with a dedicated HTMLPurifier config that allows only safe structural tags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-26 18:36:36 +01:00
..
Application	fix(restart): reset restart count when resource is manually stopped	2025-12-27 15:21:19 +01:00
CoolifyTask	refactor: simplify remote process chain and harden ActivityMonitor	2026-03-26 13:26:16 +01:00
Database	Merge remote-tracking branch 'origin/next' into fix/configurable-proxy-timeout	2026-03-10 10:01:46 +01:00
Docker	chore: prepare for PR	2026-03-10 18:34:37 +01:00
Fortify	fix(user): ensure email attributes are stored in lowercase for consistency and prevent case-related issues	2025-09-05 17:44:34 +02:00
Proxy	feat(proxy): validate stored config matches current proxy type	2026-03-24 21:32:34 +01:00
Server	fix: sanitize error output in server validation logs	2026-03-26 18:36:36 +01:00
Service	fix(storage): use escapeshellarg for volume names in shell commands	2026-03-26 11:06:30 +01:00
Shared	fix: don't show health status for exited containers	2025-11-24 09:09:37 +01:00
Stripe	fix(stripe): add error handling and resilience to subscription operations (#9030)	2026-03-18 15:38:59 +01:00
User	Changes auto-committed by Conductor	2025-10-16 17:13:47 +02:00