Andras Bacsai a165e03d06 fix(service-apps): harden updates and docker commands ... Escape service application lifecycle command arguments for deploy, restart, stop, and log status checks. Validate API update payloads from JSON/form data before applying allowed fields, preserving explicit boolean and null values. Add coverage for service application API authorization, team isolation, validation, and command escaping.		2026-07-07 15:10:24 +02:00
..
ApiSensitiveFieldsTest.php	fix(api): expose sensitive fields for privileged tokens	2026-07-07 12:53:34 +02:00
ApiTokenCreationSecurityTest.php	fix(security): prevent snapshot replay in API token permission checks	2026-02-27 22:58:44 +01:00
AuditLogTest.php	fix(ray): remove Ray debug hooks from runtime (#10847)	2026-07-03 11:40:20 +02:00
CaCertificateCommandInjectionTest.php	chore(tests): reorganize feature suites and expand team auth coverage	2026-02-26 07:13:19 +01:00
CmdHealthCheckValidationTest.php	chore(tests): reorganize feature suites and expand team auth coverage	2026-02-26 07:13:19 +01:00
CommandInjectionSecurityTest.php	fix(service-apps): harden updates and docker commands	2026-07-07 15:10:24 +02:00
GithubAppSetupCallbackTest.php	fix(github): derive app API URLs from HTML hosts	2026-06-09 18:31:06 +02:00
IpAllowlistTest.php	Merge remote-tracking branch 'origin/next' into harden-database-import-files	2026-06-29 10:35:35 +02:00
TrustHostsMiddlewareTest.php	Merge remote-tracking branch 'origin/next' into harden-database-import-files	2026-06-29 10:35:35 +02:00