Mauricio Siu 68ea9f7771 fix(security): redact git provider secrets from application.one response ...

findApplicationById eagerly loads the github/gitlab/gitea/bitbucket relations
(needed server-side to clone) including OAuth tokens, the GitHub App private key
and webhook secret. application.one returned them to the client, exposing them to
any member with service:read even when hasGitProviderAccess was false.

Adds redactApplicationGitSecrets() in the application service (blanks the secret
columns, immutably) and applies it to application.one. No client feature reads
these secrets (verified in the frontend); server-side clone paths use
findApplicationById directly, so behaviour is unchanged.

Closes GHSA-hg9j-j5mc-phf5, GHSA-wx75-vxph-2m2f

2026-07-19 21:28:02 -06:00

..

auth

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

constants

perf: share db, docker and auth singletons across duplicated bundles

2026-07-09 02:13:05 -06:00

db

feat: optionally include encryption key in web server backups

2026-07-10 03:05:28 -06:00

emails

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

lib

Merge pull request #4814 from Dokploy/feat/backup-encryption-key

2026-07-13 04:03:23 -06:00

monitoring

feat: implement host system stats retrieval for Docker monitoring

2025-11-15 00:59:00 -06:00

services

fix(security): redact git provider secrets from application.one response

2026-07-19 21:28:02 -06:00

setup

fix(databases): update default Redis version from 7 to 8 (#4224)

2026-07-05 16:21:51 -06:00

templates

test(templates): add unit tests for isolated deployment config field

2026-05-08 19:26:34 -06:00

types

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

utils

fix(security): escape user input in git clone commands across all providers

2026-07-19 20:32:15 -06:00

verification

Feat/tailwind v4 shadcn update (#4706)

2026-06-30 15:45:23 -06:00

wss

🚀 Release v0.29.5 (#4475)

2026-05-22 17:21:12 -06:00

index.ts

feat(whitelabeling): implement public whitelabeling configuration retrieval

2026-07-06 16:33:12 -06:00