Mauricio Siu d48037a802 fix(security): escape compose path and validate custom compose command ...

- composePath / appName are now passed through shell-quote in createCommand,
  getCreateEnvFileCommand and services/compose.ts deploy commands, instead of
  being interpolated raw into 'docker compose'/'docker stack' shell commands.
- compose.command: sanitizeCommand was cosmetic (trim + strip quotes). It now
  rejects shell control characters (; & | ` $ () {} <> newline), which a normal
  docker compose CLI line never contains, blocking breakout into host commands.

Closes GHSA-8r5w-vqjr-8c44, GHSA-5xv2-7f8w-9j5c, GHSA-qh6h-669j-77rw

2026-07-19 23:06:53 -06:00

..

proprietary

feat(whitelabeling): implement public whitelabeling configuration retrieval

2026-07-06 16:33:12 -06:00

admin.ts

fix(sso): apply trusted origin changes without server restart

2026-07-09 01:46:32 -06:00

ai.ts

fix(databases): update default Redis version from 7 to 8 (#4224)

2026-07-05 16:21:51 -06:00

application.ts

refactor(security): exclude git provider secrets at query level in findApplicationById

2026-07-19 21:43:51 -06:00

backup.ts

fix: strip credentials from service-level API responses (#4564)

2026-06-06 17:45:24 -06:00

bitbucket.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

cdn.ts

[autofix.ci] apply automated fixes

2025-11-19 04:46:00 +00:00

certificate.ts

refactor(certificate): remove auto-renew field from certificate handling

2026-04-03 23:00:27 -06:00

cluster.ts

refactor: rename builders to server

2024-10-05 22:15:47 -06:00

compose.ts

fix(security): escape compose path and validate custom compose command

2026-07-19 23:06:53 -06:00

deployment.ts

fix: resolve server from parent entity in deployment.readLogs (#4689)

2026-06-29 11:10:19 -06:00

destination.ts

fix: further typos

2026-03-30 09:01:50 +11:00

docker.ts

fix(security): enforce org-scope on swarm reads and escape nodeId

2026-07-19 21:20:47 -06:00

domain.ts

Merge branch 'canary' into feat/quick-service-switcher

2026-02-26 22:28:34 -06:00

environment.ts

fix(ui): improve select component behavior and styling across various providers

2026-07-06 03:27:52 -06:00

git-provider.ts

fix(security): enforce org-scope on git provider read endpoints

2026-07-19 20:55:53 -06:00

gitea.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

github.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

gitlab.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

libsql.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

mariadb.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

mongo.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

mount.ts

feat(libsql): introduce libsql service schema and update related tables

2026-03-23 16:14:37 -06:00

mysql.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

notification.ts

feat(notifications): integrate dokployBackup into notification handling

2026-04-01 08:26:24 -06:00

patch-repo.ts

refactor(patch-editor): remove repoPath dependency and streamline patch handling

2026-02-17 01:57:57 -06:00

patch.ts

fix: add early return for empty patches in generateApplyPatchesCommand to prevent unnecessary command execution

2026-02-25 22:00:40 -06:00

permission.ts

fix: allow members with git providers permission to create and delete their own (#4713)

2026-06-30 15:57:50 -06:00

port.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

postgres.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

preview-deployment.ts

fix: replace traefik.me with sslip.io for auto-generated domains

2026-05-08 19:04:24 -06:00

project.ts

Merge branch 'canary' into feat/libsql

2026-03-19 11:20:22 -06:00

redirect.ts

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

redis.ts

fix(security): escape dockerImage in database service remote docker pull

2026-07-19 22:45:31 -06:00

registry.ts

fix: prevent registry password from appearing in error messages and shell commands (#4579)

2026-06-08 09:20:34 -06:00

rollbacks.ts

fix: strip credentials from service-level API responses (#4564)

2026-06-06 17:45:24 -06:00

schedule.ts

fix: scope dokploy-server schedules to organization instead of user (#4526)

2026-06-02 02:17:49 -06:00

security.ts

feat: enhance security handling by adding refetch capability and improving error messages in security service

2026-02-25 23:30:28 -06:00

server.ts

fix(security): redact SSH private key from server read responses

2026-07-19 21:14:10 -06:00

settings.ts

fix: further typos

2026-03-30 09:01:50 +11:00

ssh-key.ts

chore: update zod and react-hook-form integration to use standard-schema resolver; update dependencies in pnpm-lock.yaml

2026-02-23 11:10:28 -06:00

user.ts

Merge branch 'canary' into invite-user-with-initial-credentials

2026-04-04 22:36:43 -06:00

volume-backups.ts

fix: strip credentials from service-level API responses (#4564)

2026-06-06 17:45:24 -06:00

web-server-settings.ts

fix(web-server-settings): use optional chaining for safer ID access in update function

2025-12-24 12:24:27 -06:00