Mauricio Siu d48037a802 fix(security): escape compose path and validate custom compose command ...

- composePath / appName are now passed through shell-quote in createCommand,
  getCreateEnvFileCommand and services/compose.ts deploy commands, instead of
  being interpolated raw into 'docker compose'/'docker stack' shell commands.
- compose.command: sanitizeCommand was cosmetic (trim + strip quotes). It now
  rejects shell control characters (; & | ` $ () {} <> newline), which a normal
  docker compose CLI line never contains, blocking breakout into host commands.

Closes GHSA-8r5w-vqjr-8c44, GHSA-5xv2-7f8w-9j5c, GHSA-qh6h-669j-77rw

2026-07-19 23:06:53 -06:00

..

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix(security): escape compose path and validate custom compose command

2026-07-19 23:06:53 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00

esbuild.config.ts

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

package.json

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

tsconfig.json

chore(dependencies): update ai-sdk packages and other dependencies

2026-02-16 12:50:34 -06:00

tsconfig.server.json

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

tsconfig.server.no-decl.json

[autofix.ci] apply automated fixes

2026-02-16 18:51:10 +00:00