103d5b6c06
Escape dynamic error messages with htmlspecialchars() before concatenating into HTML strings stored in validation_logs. Add a Purify-based mutator on Server model as defense-in-depth, with a dedicated HTMLPurifier config that allows only safe structural tags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
80 lines
2.7 KiB
PHP
80 lines
2.7 KiB
PHP
<?php
|
|
|
|
namespace App\Livewire\Server\PrivateKey;
|
|
|
|
use App\Models\PrivateKey;
|
|
use App\Models\Server;
|
|
use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Livewire\Component;
|
|
|
|
class Show extends Component
|
|
{
|
|
use AuthorizesRequests;
|
|
|
|
public Server $server;
|
|
|
|
public $privateKeys = [];
|
|
|
|
public $parameters = [];
|
|
|
|
public function mount(string $server_uuid)
|
|
{
|
|
try {
|
|
$this->server = Server::ownedByCurrentTeam()->whereUuid($server_uuid)->firstOrFail();
|
|
$this->privateKeys = PrivateKey::ownedByCurrentTeam()->get()->where('is_git_related', false);
|
|
} catch (\Throwable $e) {
|
|
return handleError($e, $this);
|
|
}
|
|
}
|
|
|
|
public function setPrivateKey($privateKeyId)
|
|
{
|
|
$ownedPrivateKey = PrivateKey::ownedByCurrentTeam()->find($privateKeyId);
|
|
if (is_null($ownedPrivateKey)) {
|
|
$this->dispatch('error', 'You are not allowed to use this private key.');
|
|
|
|
return;
|
|
}
|
|
try {
|
|
$this->authorize('update', $this->server);
|
|
DB::transaction(function () use ($ownedPrivateKey) {
|
|
$this->server->privateKey()->associate($ownedPrivateKey);
|
|
$this->server->save();
|
|
['uptime' => $uptime, 'error' => $error] = $this->server->validateConnection(justCheckingNewKey: true);
|
|
if (! $uptime) {
|
|
throw new \Exception($error);
|
|
}
|
|
});
|
|
$this->dispatch('success', 'Private key updated successfully.');
|
|
$this->dispatch('refreshServerShow');
|
|
} catch (\Exception $e) {
|
|
$this->server->refresh();
|
|
$this->server->validateConnection();
|
|
$this->dispatch('error', $e->getMessage());
|
|
}
|
|
}
|
|
|
|
public function checkConnection()
|
|
{
|
|
try {
|
|
['uptime' => $uptime, 'error' => $error] = $this->server->validateConnection();
|
|
if ($uptime) {
|
|
$this->dispatch('success', 'Server is reachable.');
|
|
$this->dispatch('refreshServerShow');
|
|
} else {
|
|
$sanitizedError = htmlspecialchars($error ?? '', ENT_QUOTES, 'UTF-8');
|
|
$this->dispatch('error', 'Server is not reachable.<br><br>Check this <a target="_blank" class="underline" href="https://coolify.io/docs/knowledge-base/server/openssh">documentation</a> for further help.<br><br>Error: '.$sanitizedError);
|
|
|
|
return;
|
|
}
|
|
} catch (\Throwable $e) {
|
|
return handleError($e, $this);
|
|
}
|
|
}
|
|
|
|
public function render()
|
|
{
|
|
return view('livewire.server.private-key.show');
|
|
}
|
|
}
|