admin 5e0625410a security(offbox): validate host/user/repo before the ssh exec (option-injection guard) ...

Background commit review flagged command/option injection: operator-provided host/user/
repo_path flow into restic's ssh -s sftp command. Reject leading '-' (ssh option
injection, e.g. -oProxyCommand) + metacharacters/traversal; OffboxConfigured fails closed
on an invalid target. Companion test covers the injection cases.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HxLA1mZurFq9kt8hneFeCs

2026-06-30 15:39:22 +02:00

..

static

…

templates

controller v0.93.0: NAS Part B off-box backup target (restic-over-SFTP)

2026-06-30 15:26:38 +02:00

agent_client_reuse_test.go

v0.74.0: fix controller->agent connection leak (reuse one agentapi client)

2026-06-22 17:19:24 +02:00

agent_disk_handlers.go

channelhealth: controller->agent channel health-check (periodic probe + classified operator alert) v0.90.0

2026-06-29 20:28:02 +02:00

agent_host_metrics_handler_test.go

v0.57.0: stable host-storage list + per-app Tier-2 config panel

2026-06-13 14:23:34 +02:00

agent_host_metrics_handler.go

v0.57.0: stable host-storage list + per-app Tier-2 config panel

2026-06-13 14:23:34 +02:00

alerts.go

channelhealth: controller->agent channel health-check (periodic probe + classified operator alert) v0.90.0

2026-06-29 20:28:02 +02:00

auth.go

…

backup_handlers.go

v0.51.0: offsite-backup UI (felhom-pbs DR) + Model-A double-nest fix

2026-06-12 20:26:52 +02:00

csrf.go

…

decommission_test.go

controller v0.68.0: storage lifecycle on intermediary model (H2/H3/M1/M3 + boot-id)

2026-06-15 19:26:02 +02:00

embed.go

…

filebrowser_gate_test.go

v0.82.0: gate FileBrowser recreate on actual change (F2); drop unused restic binary (F1)

2026-06-24 11:01:18 +02:00

funcmap.go

F5 (dashboard): surface 'route unpublished' for unhealthy/restarting deployed apps

2026-06-14 09:56:30 +02:00

handler_debug.go

…

handler_export.go

v0.76.0: campaign-#3 hardening (settings .bak recovery, restore stack_name validation, quiesce marker quarantine)

2026-06-22 23:34:33 +02:00

handlers.go

controller v0.93.0: NAS Part B off-box backup target (restic-over-SFTP)

2026-06-30 15:26:38 +02:00

integrationmgr_race_test.go

fix(M25): atomic.Pointer for Server.integrationMgr (constructor-goroutine race)

2026-06-13 22:58:59 +02:00

intermediary_test.go

controller v0.72.0: FileBrowser converges on boot-recreate

2026-06-16 17:37:12 +02:00

intermediary.go

controller v0.92.0: NAS network storage Part A2 (registry + UI + per-share health)

2026-06-30 14:40:47 +02:00

logbuffer.go

…

netstorage_handlers_test.go

controller v0.92.0: NAS network storage Part A2 (registry + UI + per-share health)

2026-06-30 14:40:47 +02:00

netstorage_handlers.go

controller v0.92.0: NAS network storage Part A2 (registry + UI + per-share health)

2026-06-30 14:40:47 +02:00

offbox_handlers.go

security(offbox): validate host/user/repo before the ssh exec (option-injection guard)

2026-06-30 15:39:22 +02:00

route_unpublished_test.go

F5 (dashboard): surface 'route unpublished' for unhealthy/restarting deployed apps

2026-06-14 09:56:30 +02:00

server.go

controller v0.93.0: NAS Part B off-box backup target (restic-over-SFTP)

2026-06-30 15:26:38 +02:00

storage_handlers_test.go

v0.81.0: retire drive-activation banner; add standalone "Kiszolgáló újraindítása" button

2026-06-23 18:46:31 +02:00

storage_handlers.go

controller v0.92.0: NAS network storage Part A2 (registry + UI + per-share health)

2026-06-30 14:40:47 +02:00

templates.go

…

tier2_config_handler.go

v0.88.0: app-email SMTP relay (in-process shim + per-app injection)

2026-06-29 08:45:04 +02:00

validate_test.go

v0.76.0: campaign-#3 hardening (settings .bak recovery, restore stack_name validation, quiesce marker quarantine)

2026-06-22 23:34:33 +02:00

validate.go

v0.76.0: campaign-#3 hardening (settings .bak recovery, restore stack_name validation, quiesce marker quarantine)

2026-06-22 23:34:33 +02:00