felhom-controller

Files

T

admin 5e0625410a security(offbox): validate host/user/repo before the ssh exec (option-injection guard)

Background commit review flagged command/option injection: operator-provided host/user/
repo_path flow into restic's ssh -s sftp command. Reject leading '-' (ssh option
injection, e.g. -oProxyCommand) + metacharacters/traversal; OffboxConfigured fails closed
on an invalid target. Companion test covers the injection cases.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HxLA1mZurFq9kt8hneFeCs

2026-06-30 15:39:22 +02:00

appbackup_bridge.go

M18: cache DB-dump validation; skip re-validate on unchanged dumps

2026-06-14 14:13:09 +02:00

backup.go

controller v0.93.0: NAS Part B off-box backup target (restic-over-SFTP)

2026-06-30 15:26:38 +02:00

migration_exclusion_test.go

B1: data-migration engine (MigrateAll + MigrateApp) + backup mutual-exclusion

2026-06-14 19:42:57 +02:00

offbox_test.go

security(offbox): validate host/user/repo before the ssh exec (option-injection guard)