admin 5e0625410a security(offbox): validate host/user/repo before the ssh exec (option-injection guard) ...

Background commit review flagged command/option injection: operator-provided host/user/
repo_path flow into restic's ssh -s sftp command. Reject leading '-' (ssh option
injection, e.g. -oProxyCommand) + metacharacters/traversal; OffboxConfigured fails closed
on an invalid target. Companion test covers the injection cases.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HxLA1mZurFq9kt8hneFeCs

2026-06-30 15:39:22 +02:00

.vscode

added csss ignore

2026-02-16 13:28:03 +01:00

controller

security(offbox): validate host/user/repo before the ssh exec (option-injection guard)

2026-06-30 15:39:22 +02:00

docs

updated SSH executable details

2026-02-18 08:36:12 +01:00

monitoring

v0.6.0: healthcheck + hub reporting implementation

2026-02-16 13:19:08 +01:00

scripts

slice 8C C.3: de-privilege the controller container (legacy docker-setup template) + CHANGELOG (v0.37.0)

2026-06-10 13:59:26 +02:00

BUGHUNT.md

docs(bughunt): reconciliation banner — H10 fixed, pointer to authoritative reconcile record

2026-06-13 19:28:13 +02:00

CHANGELOG.md

controller v0.93.0: NAS Part B off-box backup target (restic-over-SFTP)

2026-06-30 15:26:38 +02:00

CLAUDE.md

docs(claude): refine A4 live-test rule (pipeline-bypass is the line, not API-vs-UI)

2026-06-15 10:07:40 +02:00

CONTEXT.md

context: self-health arc complete (hub-side leaf-fp re-key detection, agent v0.48.0 + hub v0.22.1)

2026-06-29 23:32:46 +02:00

DIAGNOSTIC.md

document

2026-06-11 14:02:47 +02:00

REPORT.md

docs: REPORT + README for controller v0.92.0 (NAS Part A2, live-validated A-D)

2026-06-30 14:53:54 +02:00

RUNBOOK-e2e-live-drive.md

runbook: e2e live-drive (supervised) stressing CTRL-T2-1/CTRL-001/AGENT-001 + session done

2026-06-13 23:12:24 +02:00

TASK.md

chore: rework references for repo rename deploy-felhom-compose -> felhom-controller

2026-06-08 13:38:27 +02:00

TEST-REPORT.md

test campaign #3: Phase 7 brutal recovery (B1-B3 PASS, B4 skip) + final findings/cleanup

2026-06-22 22:04:55 +02:00

S

Description

No description provided

91 MiB

Languages

Go 84.2%

HTML 11.1%

Shell 2.1%

CSS 1.8%

Python 0.6%

Other 0.1%