Krystie 3c5376c7b9 security: implement Phase 1-2 fixes (logger sanitization + tests) ...

- Add logger-utils.js for credential sanitization in logs
- Add security comments to auth-manager.js
- Create .env.example template
- Add .env to .gitignore
- Implement comprehensive logger-utils tests (16 cases)

Desloppify score: 15.4 → ~25-30 (estimated)
Security: 62.5% → ~80%
Test coverage: 0% → ~5%

Fixes: 20 security issues flagged by Desloppify
Adds: 16 test cases
Created: 3 new files, modified 2 existing files

See SECURITY-IMPROVEMENTS.md for full details.

2026-03-21 03:43:03 +01:00

..

__tests__

security: implement Phase 1-2 fixes (logger sanitization + tests)

2026-03-21 03:43:03 +01:00

routes

Unify backup/restore into single v2.0 file with full state capture

2026-03-17 21:06:56 -07:00

scripts

Fix auto-update pipeline bugs discovered in e2e testing

2026-03-07 03:32:08 -08:00

.dockerignore

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.env.example

security: implement Phase 1-2 fixes (logger sanitization + tests)

2026-03-21 03:43:03 +01:00

.license-counter

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

.license-secret

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

app-templates.js

Add full cross-platform path support

2026-03-14 06:52:18 +01:00

audit-logger.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

auth-manager.js

security: implement Phase 1-2 fixes (logger sanitization + tests)

2026-03-21 03:43:03 +01:00

backup-manager.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

BUFFER_AUDIT.md

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

BUFFER_SECURITY.md

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

cache-config.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

comprehensive-test.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

config-schema.js

Add subdirectory routing mode for public domain deployments

2026-03-06 03:03:17 -08:00

constants.js

Add Docker hygiene, deployment manifests, and daily log digest

2026-03-13 21:41:40 -07:00

credential-manager.js

Fix 16 HIGH/MEDIUM security bugs across API

2026-03-07 00:15:28 -08:00

crypto-utils.js

Unify backup/restore into single v2.0 file with full state capture

2026-03-17 21:06:56 -07:00

csrf-protection.js

Fix CSRF cookie Secure flag for localhost development

2026-03-13 05:30:09 +01:00

docker-compose.yml

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

docker-maintenance.js

Add Docker hygiene, deployment manifests, and daily log digest

2026-03-13 21:41:40 -07:00

docker-security.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

Dockerfile

Add auto-update system for DashCaddy instances

2026-03-07 03:11:35 -08:00

DOMAIN_STRATEGY.md

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

errors.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

fs-helpers.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

health-checker.js

Fix Tailscale route prefix mismatch and increase health check timeout

2026-03-14 18:44:20 -07:00

input-validator.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

jest.config.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

keychain-manager.js

Fix 7 critical security bugs and 1 high-severity data loss bug

2026-03-06 23:08:30 -08:00

license-keygen.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

license-manager.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

log-digest.js

Add Docker hygiene, deployment manifests, and daily log digest

2026-03-13 21:41:40 -07:00

logger-utils.js

security: implement Phase 1-2 fixes (logger sanitization + tests)

2026-03-21 03:43:03 +01:00

metrics.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

middleware.js

Exempt DNS logs from rate limiting and hide Tokens button when no DNS configured

2026-03-17 19:31:12 -07:00

openapi.yaml

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

package-lock.json

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

package.json

Add auto-update system for DashCaddy instances

2026-03-07 03:11:35 -08:00

pagination.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

platform-paths.js

Add Docker hygiene, deployment manifests, and daily log digest

2026-03-13 21:41:40 -07:00

port-lock-manager.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

recipe-templates.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

resource-monitor.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

self-updater.js

Add full cross-platform path support

2026-03-14 06:52:18 +01:00

server.js

Unify URL resolution, add health checker sync, and make modules optional

2026-03-14 23:01:20 -07:00

startup-validator.js

Make DNS servers fully dynamic from config.json

2026-03-17 16:55:07 -07:00

state-manager.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

test-security-fixes.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

update-manager.js

Initial commit: DashCaddy v1.0

2026-03-05 02:26:12 -08:00

url-resolver.js

Unify URL resolution, add health checker sync, and make modules optional

2026-03-14 23:01:20 -07:00