mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-09-14 02:56:13 +05:00
writeTraefikConfigRemote piped the stringified YAML through echo '...' where a single quote in any label/host/serviceName broke out (GHSA-478p). Encode it as base64 like the other writers, and quote() every configPath used in remote rm/cat/redirect commands (including the input.path-derived ones). |
||
|---|---|---|
| .. | ||
| auth | ||
| constants | ||
| db | ||
| emails | ||
| lib | ||
| monitoring | ||
| services | ||
| setup | ||
| templates | ||
| types | ||
| utils | ||
| verification | ||
| wss | ||
| index.ts | ||