coolify/app/Http/Controllers
Andras Bacsai b3256d4df1 fix(security): harden model assignment and sensitive data handling
Restrict mass-assignable attributes across user/team/redis models and
switch privileged root/team creation paths to forceFill/forceCreate.

Encrypt legacy ClickHouse admin passwords via migration and cast the
correct ClickHouse password field as encrypted.

Tighten API and runtime exposure by removing sensitive team fields from
responses and sanitizing Git/compose error messages.

Expand security-focused feature coverage for command-injection and mass
assignment protections.
2026-03-29 20:56:04 +02:00
..
Api fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
Webhook fix(github-webhook): handle unsupported event types gracefully 2026-03-23 21:33:40 +01:00
Controller.php refactor: split invitation endpoint into GET (show) and POST (accept) 2026-03-26 14:30:27 +01:00
OauthController.php Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
UploadController.php feat: Refactor service database management and backup functionalities 2026-01-02 16:29:48 +01:00