wmantly bdaba513a7 security: sanitize markdown output and harden unix socket permissions ...

- Add isomorphic-dompurify to sanitize rendered docs HTML
- Tighten SocketServerJson socket permissions from 777 to 660
- Keep package.json version at 1.1.16

Co-Authored-By: Claude <noreply@anthropic.com>

2026-07-18 22:41:47 -04:00

..

api_token.js

Add self-service API tokens (PATs) with UI + Bearer auth (#119)

2026-07-12 17:12:38 -04:00

api.js

Add standalone backup script and admin update-check banner

2026-07-15 22:32:31 -04:00

auth.js

Address CodeQL findings on the OIDC auth flow

2026-07-10 13:22:12 -04:00

cert.js

Add OIDC login and per-domain authorization

2026-07-10 12:17:05 -04:00

dns.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

docs.js

security: sanitize markdown output and harden unix socket permissions

2026-07-18 22:41:47 -04:00

group.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

host_auth.js

Per-host SSO: Node auth endpoints + Redis session (#57)

2026-07-11 15:41:28 -04:00

host.js

Fix wildcard-parent edit greying and deprecated nginx http2 directive

2026-07-17 21:33:26 -04:00

permission.js

Permissions: rename Grants, add wildcards, local groups, profile

2026-07-11 10:54:15 -04:00

render.js

White-label: title/logo now driven by conf (closes #45)

2026-07-16 17:35:49 -04:00

update_check.js

Add standalone backup script and admin update-check banner

2026-07-15 22:32:31 -04:00

user.js

Make basic auth and SSO mutually exclusive per host; fix silently-broken validation errors

2026-07-15 00:41:16 -04:00