coolify/app/Models
Andras Bacsai b3256d4df1 fix(security): harden model assignment and sensitive data handling
Restrict mass-assignable attributes across user/team/redis models and
switch privileged root/team creation paths to forceFill/forceCreate.

Encrypt legacy ClickHouse admin passwords via migration and cast the
correct ClickHouse password field as encrypted.

Tighten API and runtime exposure by removing sensitive team fields from
responses and sanitizing Git/compose error messages.

Expand security-focused feature coverage for command-injection and mass
assignment protections.
2026-03-29 20:56:04 +02:00
..
Application.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
ApplicationDeploymentQueue.php fix: add datetime cast to finished_at column (#7418) 2026-01-04 17:23:22 +01:00
ApplicationPreview.php fix(storage): use escapeshellarg for volume names in shell commands 2026-03-26 11:06:30 +01:00
ApplicationSetting.php Add per-application Docker image retention for rollback capability 2025-12-05 11:02:07 +01:00
BaseModel.php refactor: rename name method to sanitizedName in BaseModel for clarity 2024-12-10 08:50:07 +01:00
CloudInitScript.php refactor: improve cloud-init script UX and remove description field 2025-10-11 11:16:28 +02:00
CloudProviderToken.php fix: add UUID support to CloudProviderToken model 2025-12-10 08:59:13 +01:00
DiscordNotificationSettings.php feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-14 11:35:22 +01:00
DockerCleanupExecution.php feat: DB and Model for docker cleanup executions 2025-01-15 17:11:15 +01:00
EmailNotificationSettings.php feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-14 11:35:22 +01:00
Environment.php test(factories): add missing model factories for app test suite 2026-03-03 09:50:05 +01:00
EnvironmentVariable.php feat(preview-env): add production variable fallback for docker-compose 2026-03-25 13:26:50 +01:00
GithubApp.php fixed github app deleting private key when it is used by other resources 2025-10-30 01:16:59 +05:30
GitlabApp.php fix: access team's github apps only 2024-10-24 13:28:31 +02:00
InstanceSettings.php fix: optimize queries and caching for projects and environments 2026-01-16 11:51:26 +01:00
LocalFileVolume.php fix(storage): consistent path validation and escaping for file volumes 2026-03-25 23:44:37 +01:00
LocalPersistentVolume.php feat(storage): add storage endpoints and UUID support for databases and services 2026-03-23 15:15:02 +01:00
OauthSetting.php feat(auth): Add Clerk OAuth Provider (#5553) 2025-06-18 14:29:46 +02:00
PersonalAccessToken.php Fix styling 2024-06-10 20:43:34 +00:00
PrivateKey.php fix(ssh): handle chmod failures gracefully and simplify key management 2026-03-16 21:27:10 +01:00
Project.php test(factories): add missing model factories for app test suite 2026-03-03 09:50:05 +01:00
ProjectSetting.php feat: initial api endpoints 2024-02-16 21:56:38 +01:00
PushoverNotificationSettings.php feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-14 11:35:22 +01:00
S3Storage.php feat(storage): add resources tab and improve S3 deletion handling 2026-03-19 11:42:29 +01:00
ScheduledDatabaseBackup.php fix(models): update sorting of scheduled database backups to order by creation date instead of name 2025-09-26 08:24:38 +02:00
ScheduledDatabaseBackupExecution.php feat(backup): enhance backup job with S3 upload handling and notifications 2025-10-07 15:02:23 +02:00
ScheduledTask.php test(factories): add missing model factories for app test suite 2026-03-03 09:50:05 +01:00
ScheduledTaskExecution.php fix(api): improve scheduled tasks API with auth, validation, and execution endpoints 2026-02-18 11:53:58 +01:00
Server.php Merge remote-tracking branch 'origin/next' into fix/harden-getlogs-livewire-properties 2026-03-28 14:10:15 +01:00
ServerSetting.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
Service.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
ServiceApplication.php fix(service): resolve team lookup via service relationship 2026-02-23 13:23:12 +01:00
ServiceDatabase.php feat: add configurable timeout for public database TCP proxy 2026-02-26 21:12:58 -08:00
SharedEnvironmentVariable.php feat: add comment field to shared environment variables 2025-12-27 15:24:09 +01:00
SlackNotificationSettings.php feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-14 11:35:22 +01:00
SslCertificate.php fix(ssl): when regenerating SSL certs the cert is not singed with the new CN 2025-02-07 19:36:52 +01:00
StandaloneClickhouse.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
StandaloneDocker.php test(factories): add missing model factories for app test suite 2026-03-03 09:50:05 +01:00
StandaloneDragonfly.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandaloneKeydb.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandaloneMariadb.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandaloneMongodb.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandaloneMysql.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandalonePostgresql.php fix: add mass assignment protection to models 2026-03-28 12:32:57 +01:00
StandaloneRedis.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
Subscription.php fix(subscription): harden quantity updates and proxy trust behavior 2026-03-03 12:28:16 +01:00
SwarmDocker.php fix: optimize queries and caching for projects and environments 2026-01-16 11:51:26 +01:00
Tag.php feat(validation): centralize validation patterns for names and descriptions 2025-08-19 12:14:48 +02:00
Team.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
TeamInvitation.php Update app/Models/TeamInvitation.php 2025-09-25 11:33:32 +02:00
TelegramNotificationSettings.php feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-14 11:35:22 +01:00
User.php fix(security): harden model assignment and sensitive data handling 2026-03-29 20:56:04 +02:00
UserChangelogRead.php feat(changelog): implement automated changelog fetching from GitHub and enhance changelog read tracking 2025-08-12 10:07:11 +02:00
WebhookNotificationSettings.php fix: update webhook notification settings migration to use updateOrInsert and add logging 2025-11-25 15:35:01 +01:00