sami7777
0 Followers · 0 Following
  • Joined on 2026-06-10
Repositories
3
 Projects Packages Public Activity Starred Repositories
sami7777 pushed to dc/DC-080 at sami7777/dashcaddy 2026-08-19 03:28:13 +02:00
sami7777 created branch dc/DC-080 in sami7777/dashcaddy 2026-08-19 03:28:13 +02:00
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:53:29 +02:00
a7260436d1 fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:52:58 +02:00
a7260436d1 fix(disaster-recovery): stage Caddyfile + close path-traversal in assets/themes (DC-079) [glm-grade=A]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:36:34 +02:00
a4e4b24732 fix(update-manager): force IPv4 + per-request timeout + transient-only retry on registry digest probes (DC-078) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:36:13 +02:00
a4e4b24732 fix(update-manager): force IPv4 + per-request timeout + transient-only retry on registry digest probes (DC-078) [glm-grade=A]
0086de97da Merge feature/dc-064-discover-adopt-fetcht: DC-077 nesting-guard silent no-op fix [glm-grade=B]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 02:07:55 +02:00
0086de97da Merge feature/dc-064-discover-adopt-fetcht: DC-077 nesting-guard silent no-op fix [glm-grade=B]
18ffd2e519 fix(nesting-guard): export dataDir from src/config/paths; harden fallback to platform-paths (DC-077) [glm-grade=B]
Compare 2 commits »
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 02:07:22 +02:00
18ffd2e519 fix(nesting-guard): export dataDir from src/config/paths; harden fallback to platform-paths (DC-077) [glm-grade=B]
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 01:41:36 +02:00
2fef1c47e5 fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-19 01:40:39 +02:00
2fef1c47e5 fix(ca): gate per-service cert/key download behind TOTP+admin scope; require explicit PFX password; add rate limit (DC-076) [glm-grade=A]
e8c5a7a1fb Merge dc/DC-074-sites-ssrf: DC-074 sites SSRF hardening [glm-grade=A]
270e8d57e3 fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]
7db152499c Merge dc/DC-073-caddy-upstreams-host-validation: DC-073 phantom-mute hardening [glm-grade=A]
a9bb4a1835 fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]
Compare 8 commits »
sami7777 deleted branch dc/DC-074-sites-ssrf from sami7777/dashcaddy 2026-08-19 00:48:06 +02:00
sami7777 pushed to dc/DC-074-sites-ssrf at sami7777/dashcaddy 2026-08-19 00:47:12 +02:00
0fb2d68af9 fix(sites): SSRF hardening — validateUpstream() blocks private/reserved upstreams in /site and /site/external (DC-074) [glm-grade=A]
sami7777 created branch dc/DC-074-sites-ssrf in sami7777/dashcaddy 2026-08-19 00:47:12 +02:00
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 00:31:23 +02:00
e8c5a7a1fb Merge dc/DC-074-sites-ssrf: DC-074 sites SSRF hardening [glm-grade=A]
270e8d57e3 fix(sites): SSRF hardening — validate upstream + externalUrl reject private/reserved hosts (DC-074) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-19 00:10:49 +02:00
7db152499c Merge dc/DC-073-caddy-upstreams-host-validation: DC-073 phantom-mute hardening [glm-grade=A]
a9bb4a1835 fix(caddy-upstreams): validate host is known upstream on all 3 mute endpoints (DC-073) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 23:54:17 +02:00
b64f23301b Merge dc/DC-072-exec-scope: DC-072 exec scope + containerId hardening (glm-grade=A)
83d7c65bf2 fix(exec): scope-based authorization + tighten containerId charset (DC-072) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 23:17:42 +02:00
1462024944 Merge feature/dc-064-discover-adopt-fetcht: DC-070 caddycode config sanitization [glm-grade=A]
297332b0e1 fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to feature/dc-064-discover-adopt-fetcht at sami7777/dashcaddy 2026-08-18 23:16:49 +02:00
297332b0e1 fix(caddycode): validate + escape generation config — block CRLF / " / brace injection in Caddyfile interpolation (DC-070) [glm-grade=A]
384f9c8bdb Merge remote-tracking branch 'origin/fix/dc-069-caddy-admin-ipv6-origin'
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]
5382d832d9 fix(fleet): SSRF hardening — hostname validation + DNS rebinding + probe-by-IP (DC-068) [glm-grade=A]
c6b2f556c2 fix(openclaw): harden proxy — 5 MiB cap, RFC 7230 hop-by-hop strip, open-redirect (Location/Refresh/WWW-Auth) strip, path + status validators (DC-065) [glm-grade=A]
Compare 6 commits »
sami7777 pushed to main at sami7777/dashcaddy 2026-08-18 22:42:36 +02:00
384f9c8bdb Merge remote-tracking branch 'origin/fix/dc-069-caddy-admin-ipv6-origin'
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]
Compare 2 commits »
sami7777 pushed to fix/dc-069-caddy-admin-ipv6-origin at sami7777/dashcaddy 2026-08-18 22:35:05 +02:00
933606ce3f fix(caddy-admin): IPv6 loopback origin allowlist + bracket-strip helper (DC-069) [glm-grade=A]