whyour 442ab2c616 fix(security): restrict task environment controls and app scopes (#3121) ...

* fix(security): restrict task environment controls and app scopes

* fix(security): preserve legacy scopes and add read-only access

* feat(security): add read-only scopes for remaining resources

* fix(security): reject apps scope grants in app API

* fix(security): protect system app and task file boundaries

* fix: block case-variant secret paths and task runner env overrides

2026-11-03 23:04:43 +08:00

..

auth.ts

fix: harden authentication and file access security

2026-09-05 18:19:01 +08:00

authMutation.ts

fix: harden authentication and file access security

2026-09-05 18:19:01 +08:00

childProcess.ts

fix: 修复任务生命周期与调度就绪，优化执行和构建开销 (#3069)

2026-09-13 00:32:41 +08:00

clientIp.ts

feat: add client IP diagnostics and blocking

2026-08-16 13:57:33 +08:00

cronCommand.ts

fix: 加固安全输入边界并修复订阅兼容性 (#3084)

2026-10-06 18:21:54 +08:00

cronSchedule.ts

fix: preserve cron semantics during node-cron adaptation

2026-10-17 20:00:33 +08:00

cronScheduler.ts

fix: synchronize runtime locales and harden online updates

2026-10-17 07:07:09 +08:00

errors.ts

perf: reduce resident dependencies and duplicate WebSocket authentication (#3071)

2026-09-18 20:22:18 +08:00

fileAccess.ts

fix(security): restrict task environment controls and app scopes (#3121)

2026-11-03 23:04:43 +08:00

i18n.ts

fix(security): restrict task environment controls and app scopes (#3121)

2026-11-03 23:04:43 +08:00

interface.ts

fix: invalidate queued cron revisions and enforce task process timeouts

2026-09-29 23:37:00 +08:00

languageSync.ts

fix: synchronize runtime locales and harden online updates

2026-10-17 07:07:09 +08:00

linuxMirror.ts

fix: 修复完整镜像源地址及 CRLF 任务导入 (#3093)

2026-10-13 01:11:35 +08:00

loginThrottle.ts

fix: 加固安全输入边界并修复订阅兼容性 (#3084)

2026-10-06 18:21:54 +08:00

logPath.ts

fix: 加固安全输入边界并修复订阅兼容性 (#3084)

2026-10-06 18:21:54 +08:00

logReader.ts

perf: bound runtime memory and storage usage

2026-08-16 16:29:06 +08:00

logStreamManager.ts

fix: 修复任务生命周期与调度就绪，优化执行和构建开销 (#3069)

2026-09-13 00:32:41 +08:00

notificationAudit.ts

fix(notify): audit system and JS/Python script notification results

2026-10-13 02:20:59 +08:00

password.ts

fix: harden authentication and file access security

2026-09-05 18:19:01 +08:00

pLimit.ts

fix: synchronize runtime locales and harden online updates

2026-10-17 07:07:09 +08:00

retention.ts

perf: bound runtime memory and storage usage

2026-08-16 16:29:06 +08:00

runCron.ts

fix: skip new scheduled triggers while a single-instance task is active (#3101)

2026-10-24 23:11:36 +08:00

runtimeBuild.ts

build: unify Node 24 and upgrade release flow

2026-10-26 23:26:40 +08:00

schedulerMutationLock.ts

fix: 修复 develop 调度锁、运行恢复与 Alpine 缓存并发 (#3070)

2026-09-13 13:44:44 +08:00

schedulerReadiness.ts

fix: 修复任务生命周期与调度就绪，优化执行和构建开销 (#3069)

2026-09-13 00:32:41 +08:00

schemaMigrations.ts

fix: 修复任务生命周期与调度就绪，优化执行和构建开销 (#3069)

2026-09-13 00:32:41 +08:00

scriptHistory.ts

feat: add script version history (#3085)

2026-10-06 22:00:11 +08:00

shellQuote.ts

fix: 加固安全输入边界并修复订阅兼容性 (#3084)

2026-10-06 18:21:54 +08:00

startupProcess.ts

perf: reduce resident dependencies and duplicate WebSocket authentication (#3071)

2026-09-18 20:22:18 +08:00

store.ts

修复识别系统默认语言

2026-07-04 01:13:59 +08:00

subscriptionMutationLock.ts

fix: resolve dev panel and CLI regressions

2026-10-07 12:35:10 +08:00

subscriptionPath.ts

fix: 加固安全输入边界并修复订阅兼容性 (#3084)

2026-10-06 18:21:54 +08:00

subscriptionStorage.ts

fix: resolve dev panel and CLI regressions

2026-10-07 12:35:10 +08:00

taskEnvName.ts

fix(security): restrict task environment controls and app scopes (#3121)

2026-11-03 23:04:43 +08:00

trustProxy.ts

fix: synchronize runtime locales and harden online updates

2026-10-17 07:07:09 +08:00

utils.ts

feat: add script version history (#3085)

2026-10-06 22:00:11 +08:00