Flody.lee 59a357f76f fix(security): harden command injection, path traversal, auth surfaces ... Audit of the backend attack surface and fixes for the web-reachable CRITICAL/HIGH issues. Adds back/shared/security.ts with centralized hardening helpers (shellEscape, assertSafeDependenceName, SUBSCRIPTION_PATTERNS, safeCompare, isSafeSshConfigValue). - Subscription fields (url/branch/whitelist/blacklist/extensions/proxy) are now shell-escaped before reaching spawn() and validated with strict Joi patterns at the API, closing OS command injection and the downstream shell eval/git-arg-injection paths. - Dependency names are validated before interpolation into pnpm/pip/apk/apt commands (incl. the embedded Python source). - SSH config generation rejects newline/metachar injection in host/proxy (prevents injected ProxyCommand execution). - ConfigService.getFile resolves the real path before containment check, fixing data/scripts/../db traversal that leaked the SQLite DB. - /configs/save containment check fixed (sibling-dir write bypass). - Script/env uploads use path.basename, preventing arbitrary file write (crontab.list/env.sh overwrite -> RCE) via multer originalname. - JWT secret is generated and persisted per-install instead of the public default 'whyour-secret'; production refuses to boot without one. - Token comparison is now constant-time (safeCompare). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-22 11:22:15 +08:00
..
config.ts	fix(security): harden command injection, path traversal, auth surfaces	2026-06-22 11:22:15 +08:00
cron.ts	修复国际化文案	2026-06-21 23:53:32 +08:00
cronView.ts	修复系统设置数据未初始化	2024-06-12 13:53:45 +08:00
dependence.ts	修复国际化文案	2026-06-21 23:53:32 +08:00
env.ts	feat: add environment variable labels	2026-05-23 23:21:38 +08:00
grpc.ts	grpc 服务增加证书校验	2026-06-13 20:16:49 +08:00
health.ts	修改服务启动逻辑	2025-05-07 09:30:00 +08:00
http.ts	fix IPv6 connectivity	2026-05-06 01:29:01 +08:00
log.ts	脚本管理和日志管理支持下载	2025-03-13 00:22:24 +08:00
metrics.ts	修改服务启动逻辑	2025-05-07 09:30:00 +08:00
notify.ts	修复国际化文案	2026-06-21 23:53:32 +08:00
open.ts	更新国际化文案	2026-06-11 23:18:45 +08:00
schedule.ts	修复模块注入	2025-10-26 22:32:03 +08:00
script.ts	脚本管理和日志管理支持下载	2025-03-13 00:22:24 +08:00
sock.ts	修复调试脚本日志丢失	2023-09-22 00:46:16 +08:00
sshKey.ts	fix(security): harden command injection, path traversal, auth surfaces	2026-06-22 11:22:15 +08:00
subscription.ts	修复国际化文案	2026-06-21 23:53:32 +08:00
system.ts	修复国际化文案	2026-06-21 23:53:32 +08:00
user.ts	修复国际化文案	2026-06-21 23:53:32 +08:00