Escape dynamic error messages with htmlspecialchars() before concatenating into HTML strings stored in validation_logs. Add a Purify-based mutator on Server model as defense-in-depth, with a dedicated HTMLPurifier config that allows only safe structural tags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| CheckUpdates.php | ||
| CleanupDocker.php | ||
| ConfigureCloudflared.php | ||
| DeleteServer.php | ||
| InstallDocker.php | ||
| InstallPrerequisites.php | ||
| ResourcesCheck.php | ||
| RestartContainer.php | ||
| RunCommand.php | ||
| StartLogDrain.php | ||
| StartSentinel.php | ||
| StopLogDrain.php | ||
| StopSentinel.php | ||
| UpdateCoolify.php | ||
| UpdatePackage.php | ||
| ValidatePrerequisites.php | ||
| ValidateServer.php | ||