coolify/app/Http/Controllers
Andras Bacsai c1518ba1c0 fix(webhook): match manual webhook repositories exactly
The manual webhook handlers selected target applications with a
`git_repository LIKE %full_name%` substring query, so a payload
repository name could match unintended applications when repository
names overlap.

Add a `MatchesManualWebhookApplications` trait that validates the
incoming `owner/repo` value and matches `Application.git_repository`
by exact normalized path. Github, Gitlab, Gitea and Bitbucket manual
handlers now use it, reject invalid repository input early, and return
a consistent generic webhook failure payload.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-22 15:32:44 +02:00
..
Api feat(sentinel): deduplicate metrics push processing 2026-05-22 12:48:48 +02:00
Webhook fix(webhook): match manual webhook repositories exactly 2026-05-22 15:32:44 +02:00
Controller.php refactor(auth): upgrade email verification hash to sha256 2026-04-20 12:09:48 +02:00
OauthController.php fix: normalize oauth emails before matching users 2026-04-09 09:38:56 -06:00
UploadController.php fix(backup): add .dmp to allowed extensions for database import (#9869) 2026-04-29 18:57:50 +02:00