coolify/app/Actions
Andras Bacsai b3256d4df1 fix(security): harden model assignment and sensitive data handling
Restrict mass-assignable attributes across user/team/redis models and
switch privileged root/team creation paths to forceFill/forceCreate.

Encrypt legacy ClickHouse admin passwords via migration and cast the
correct ClickHouse password field as encrypted.

Tighten API and runtime exposure by removing sensitive team fields from
responses and sanitizing Git/compose error messages.

Expand security-focused feature coverage for command-injection and mass
assignment protections.
2026-03-29 20:56:04 +02:00
..
Application fix(restart): reset restart count when resource is manually stopped 2025-12-27 15:21:19 +01:00
CoolifyTask refactor: simplify remote process chain and harden ActivityMonitor 2026-03-26 13:26:16 +01:00
Database Merge remote-tracking branch 'origin/next' into fix/configurable-proxy-timeout 2026-03-10 10:01:46 +01:00
Docker chore: prepare for PR 2026-03-10 18:34:37 +01:00
Fortify fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
Proxy feat(proxy): validate stored config matches current proxy type 2026-03-24 21:32:34 +01:00
Server fix: sanitize error output in server validation logs 2026-03-26 18:36:36 +01:00
Service fix(storage): use escapeshellarg for volume names in shell commands 2026-03-26 11:06:30 +01:00
Shared fix: don't show health status for exited containers 2025-11-24 09:09:37 +01:00
Stripe feat(subscription): add billing interval to price preview 2026-03-27 19:05:13 +01:00
User Changes auto-committed by Conductor 2025-10-16 17:13:47 +02:00