0e45f3b0e3
security: GHSA-xc5w-4v5w-7x65 (HIGH) harden shell argument type safety
...
Block additional unvalidated argument types from shell actions, enforce
full-string custom regex matching, and allowlist http/https URL schemes.
Update checkbox integration test to use exec, matching the intended shell
vs exec split for choiceless checkbox arguments.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:40:48 +01:00
42f2572616
fix(config): reject ambiguous checklist comma format and propagate encode errors
...
ParseChecklistValue now accepts JSON arrays or single bare values and rejects
legacy comma-separated input. Empty JSON segments are validated consistently,
and FormatChecklistValue returns marshal errors instead of an empty string
2026-07-07 11:57:20 +01:00
9dc51df01d
fix: harden checklist JSON wire format, entity pagination, and review findings across API and UI
2026-07-07 10:14:17 +01:00
b18518ebea
fix: add support for entities in checklists
2026-07-06 12:17:03 +01:00
e24ae6265b
feat: Checklist support ( #922 )
2026-07-06 11:01:22 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
ebffd9f040
security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
...
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
bc5e9fbe1e
security: GHSA-xx6g-43w2-9g6g (MODERATE) Email argument makes compliance harder, enables log injection
2026-03-10 23:27:09 +00:00
4bbd2eab15
security: GHSA-49gm-hh7w-wfvf
2026-02-22 10:19:08 +00:00
b777d599aa
fix: Massive cleanup of template parsing
2026-02-07 00:09:46 +00:00
b37f035ea6
fix: Move templating functionality to global, making it possible to replace templates across the config
2026-01-25 10:32:22 +00:00
2956b9972f
chore: nil checks
2025-12-23 19:52:15 +00:00
8e2db0ad82
chore: reduce argument validation complexity
2025-12-23 16:47:59 +00:00
09e1f0f984
fix: Argument validation targets the bindings (fixes checkboxes, etc)
2025-12-23 16:42:00 +00:00
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
de7129e1d7
chore: reduce cyclomatic complexity
2025-11-10 23:15:18 +00:00
e6a02ac614
chore: fix various cyclo checks
2025-10-30 15:25:57 +00:00
c3d5da1981
chore: reduce cyclo complexity in service
2025-10-30 12:52:58 +00:00
c86bf629f9
bugfix: Added nil checks
2025-10-26 17:32:26 +00:00
c917d1b1e7
bugfix: #639 Exec support, disallow URL and similar arguments with
2025-10-26 16:40:44 +00:00
a464e6a445
fix: broken tests after changing the way arguments are parsed
2025-10-01 22:20:56 +01:00
570c0ba087
chore: Repair output streaming, lots of css/go lint
2025-09-06 08:42:13 +01:00
6b342cbedb
chore: Port huge amount of code to OliveTin 3k
2025-08-20 00:05:40 +01:00
d4d3193c1d
bugfix: Argument confirmations stopped working ( #627 ) ( #632 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-07-29 21:51:34 +00:00
81ef166d78
bugfix #627 ( #630 )
2025-07-28 09:24:38 +00:00
e922baa2e0
feat: #104 Checkboxes / booleans at last! ( #620 )
2025-07-19 02:10:41 +01:00
b16ce074ea
chore: Various codestyle fixes
2025-07-12 23:44:24 +01:00
e38361f3d7
fix: gofmt/gocylo leftover from old PR ( #610 )
2025-06-22 20:42:57 +00:00
1ffdd93ddf
fix: Redact password arguments in logs #594 ( #601 )
2025-06-06 21:00:56 +00:00
18c5599704
fix: Datetime mangling for Android phones #564 ( #602 )
2025-06-06 20:41:54 +00:00
633e513697
feature: ( #568 ) Separator allowed in usergroup line for trusted headers ( #572 )
2025-04-22 14:35:49 +01:00
eb2721c023
chore: Cleanup argument handling ( #571 )
2025-04-21 08:50:59 +00:00
88f639d29f
chore: Cleanup executor shell passing ( #556 )
2025-04-07 20:48:45 +00:00
ff31abe66c
refactor: Project directories ( #541 )
2025-03-22 01:06:59 +00:00
jamesread