Replace direct shell interpolation of environment values with base64 encoding to prevent command injection attacks. Environment configuration is now built as a single string, base64-encoded, then decoded to file atomically. Also add regex validation to restrict environment field values to safe characters (alphanumeric, underscore, hyphen, dot) at the application layer. Fixes GHSA-3xm2-hqg8-4m2p |
||
|---|---|---|
| .. | ||
| Application | ||
| CoolifyTask | ||
| Database | ||
| Docker | ||
| Fortify | ||
| Proxy | ||
| Server | ||
| Service | ||
| Shared | ||
| Stripe | ||
| User | ||