rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
coolify/app/Livewire
History
Andras Bacsai 3fdce06b65 fix(storage): consistent path validation and escaping for file volumes 
Ensure all file volume paths are validated and properly escaped before
use. Previously, only directory mount paths were validated at the input
layer — file mount paths now receive the same treatment across Livewire
components, API controllers, and the model layer.

- Validate and escape fs_path at the top of saveStorageOnServer() before
  any commands are built
- Add path validation to submitFileStorage() in Storage Livewire component
- Add path validation to file mount creation in Applications, Services,
  and Databases API controllers
- Add regression tests for path validation coverage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-25 23:44:37 +01:00
..
Admin Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
Boarding fix(server): improve IP uniqueness validation with team-specific error messages 2026-02-12 08:10:59 +01:00
Destination refactor(redirect): replace redirect calls with redirectRoute helper for consistency 2025-12-26 13:29:59 +01:00
Notifications feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-18 14:53:49 +01:00
Profile fix(user): ensure email attributes are stored in lowercase for consistency and prevent case-related issues 2025-09-05 17:44:34 +02:00
Project fix(storage): consistent path validation and escaping for file volumes 2026-03-25 23:44:37 +01:00
Security refactor: remove duplicated validation messages 2026-01-05 13:15:14 +01:00
Server fix(livewire): add input validation to unmanaged container operations 2026-03-25 20:42:00 +01:00
Settings fix(settings): require instance admin authorization for updates page 2026-03-25 19:33:51 +01:00
SharedVariables chore: prepare for PR 2026-03-11 06:36:12 +01:00
Source/Github fix(git): GitHub App webhook endpoint defaults to IPv4 instead of the instance domain 2026-03-13 11:19:00 +05:30
Storage feat(storage): add storage management for backup schedules 2026-03-19 12:48:52 +01:00
Subscription fix(subscription): prevent duplicate subscriptions with updateOrCreate 2026-03-24 10:52:41 +01:00
Tags Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
Team feat(livewire): add selectedActions parameter and error handling to delete methods 2026-03-11 15:04:45 +01:00
Terminal feat: replace terminal dropdown with searchable datalist component 2025-10-12 14:57:45 +02:00
ActivityMonitor.php fix(api): validate server ownership in domains endpoint and scope activity lookups 2026-03-25 16:20:53 +01:00
Dashboard.php refactor: replace queries with cached versions for performance improvements 2025-12-08 13:39:33 +01:00
DeploymentsIndicator.php Refactor deployment indicator to use server-side route detection 2025-12-11 09:39:56 +01:00
ForcePasswordReset.php Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
GlobalSearch.php chore: prepare for PR 2026-02-18 11:20:32 +01:00
Help.php fix(feedback): update feedback email address to improve communication with users 2025-09-11 20:23:07 +02:00
LayoutPopups.php Fix styling 2024-06-10 20:43:34 +00:00
MonacoEditor.php Merge branch 'next' into andrasbacsai/livewire-model-binding 2025-10-16 11:05:29 +02:00
NavbarDeleteTeam.php feat(livewire): add selectedActions parameter and error handling to delete methods 2026-03-11 15:04:45 +01:00
SettingsBackup.php fix validation on a few views 2025-10-06 21:25:24 +02:00
SettingsDropdown.php feat(ui): display current version in settings dropdown and update UI accordingly 2025-09-01 16:23:14 +02:00
SettingsEmail.php fix(email-notifications): change notify method to notifyNow for immediate test email delivery 2025-06-04 17:10:06 +02:00
SettingsOauth.php fix: add null checks and validation to OAuth bulk update method 2025-10-27 17:04:33 +01:00
SwitchTeam.php fix(ui): always redirect to dashboard after team switch 2025-02-03 21:38:40 +01:00
Upgrade.php Widen upgrade popup and add dev mode simulation 2025-12-17 10:59:38 +01:00
VerifyEmail.php Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00