coolify/app/Livewire
Andras Bacsai 3fdce06b65 fix(storage): consistent path validation and escaping for file volumes
Ensure all file volume paths are validated and properly escaped before
use. Previously, only directory mount paths were validated at the input
layer — file mount paths now receive the same treatment across Livewire
components, API controllers, and the model layer.

- Validate and escape fs_path at the top of saveStorageOnServer() before
  any commands are built
- Add path validation to submitFileStorage() in Storage Livewire component
- Add path validation to file mount creation in Applications, Services,
  and Databases API controllers
- Add regression tests for path validation coverage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-25 23:44:37 +01:00
..
Admin
Boarding fix(server): improve IP uniqueness validation with team-specific error messages 2026-02-12 08:10:59 +01:00
Destination refactor(redirect): replace redirect calls with redirectRoute helper for consistency 2025-12-26 13:29:59 +01:00
Notifications feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-18 14:53:49 +01:00
Profile
Project fix(storage): consistent path validation and escaping for file volumes 2026-03-25 23:44:37 +01:00
Security refactor: remove duplicated validation messages 2026-01-05 13:15:14 +01:00
Server fix(livewire): add input validation to unmanaged container operations 2026-03-25 20:42:00 +01:00
Settings fix(settings): require instance admin authorization for updates page 2026-03-25 19:33:51 +01:00
SharedVariables chore: prepare for PR 2026-03-11 06:36:12 +01:00
Source/Github fix(git): GitHub App webhook endpoint defaults to IPv4 instead of the instance domain 2026-03-13 11:19:00 +05:30
Storage feat(storage): add storage management for backup schedules 2026-03-19 12:48:52 +01:00
Subscription fix(subscription): prevent duplicate subscriptions with updateOrCreate 2026-03-24 10:52:41 +01:00
Tags
Team feat(livewire): add selectedActions parameter and error handling to delete methods 2026-03-11 15:04:45 +01:00
Terminal feat: replace terminal dropdown with searchable datalist component 2025-10-12 14:57:45 +02:00
ActivityMonitor.php fix(api): validate server ownership in domains endpoint and scope activity lookups 2026-03-25 16:20:53 +01:00
Dashboard.php refactor: replace queries with cached versions for performance improvements 2025-12-08 13:39:33 +01:00
DeploymentsIndicator.php Refactor deployment indicator to use server-side route detection 2025-12-11 09:39:56 +01:00
ForcePasswordReset.php
GlobalSearch.php chore: prepare for PR 2026-02-18 11:20:32 +01:00
Help.php
LayoutPopups.php
MonacoEditor.php Merge branch 'next' into andrasbacsai/livewire-model-binding 2025-10-16 11:05:29 +02:00
NavbarDeleteTeam.php feat(livewire): add selectedActions parameter and error handling to delete methods 2026-03-11 15:04:45 +01:00
SettingsBackup.php fix validation on a few views 2025-10-06 21:25:24 +02:00
SettingsDropdown.php
SettingsEmail.php
SettingsOauth.php fix: add null checks and validation to OAuth bulk update method 2025-10-27 17:04:33 +01:00
SwitchTeam.php
Upgrade.php Widen upgrade popup and add dev mode simulation 2025-12-17 10:59:38 +01:00
VerifyEmail.php