fcd574e1eb
Replace direct shell interpolation of environment values with base64 encoding to prevent command injection attacks. Environment configuration is now built as a single string, base64-encoded, then decoded to file atomically. Also add regex validation to restrict environment field values to safe characters (alphanumeric, underscore, hyphen, dot) at the application layer. Fixes GHSA-3xm2-hqg8-4m2p |
||
|---|---|---|
| .. | ||
| CheckUpdates.php | ||
| CleanupDocker.php | ||
| ConfigureCloudflared.php | ||
| DeleteServer.php | ||
| InstallDocker.php | ||
| InstallPrerequisites.php | ||
| ResourcesCheck.php | ||
| RestartContainer.php | ||
| RunCommand.php | ||
| StartLogDrain.php | ||
| StartSentinel.php | ||
| StopLogDrain.php | ||
| StopSentinel.php | ||
| UpdateCoolify.php | ||
| UpdatePackage.php | ||
| ValidatePrerequisites.php | ||
| ValidateServer.php | ||