dokploy

mirror of https://github.com/Dokploy/dokploy.git synced 2026-06-30 11:35:22 +02:00

Files

viky 8b6481501e fix: add method="post" to auth forms to prevent credential leak in URL (#4683 )

Auth forms (login, register, 2FA, backup-code, reset-password) had no
method attribute, defaulting to GET. react-hook-form's handleSubmit
preventDefault()s only after hydration; submitting in the pre-hydration
or no-JS window triggers a native GET to the current URL, leaking
email/password into the URL, history, access logs and Referer header.

Setting method="post" makes the native fallback a POST so credentials
go in the request body instead. Normal JS submit path is unchanged.
Verified in a browser: GET (?email&password) -> POST (clean URL).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-29 12:03:13 -06:00

accept-invitation

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

api

Merge pull request #4278 from mixelburg/fix/webhook-401-missing-signature

2026-04-28 18:30:48 -06:00

dashboard

Feat/concurrent deployments in memory queue (#4645 )

2026-06-16 23:15:19 -06:00

_app.tsx

feat: implement whitelabeling features including settings, preview, and provider components