Gabriel Ngandu-Biseba
1515ab09be
Fix codeQL error
...
------
Call "tmpdir()" a single time inside "database.js" and remove "caFilePath" from the config if the path starts with the temporary directory path as a failsafe
Fix whitespace
Move the unassignment of " dbConfig.ssl" and " dbConfig.ssl" outside the block responsible to move the CA file from the temporary directory to the data directory
Fix inverted "if" condition. Also add "path.resolve" to a path check in order to make sure that we are comparing absolute paths with each others
Remove unnecessary check for a ".pem" file, simplify the path check and fix the file copying to itself
Add additional path checks to avoid filename exploits
Fix issue where the temp directory used to temporarily store the CA file is within the working directory instead of the OS provided temp directory path
2025-04-03 14:33:36 +02:00
Gabriel Ngandu-Biseba
316262efe5
Sanitize all paths used inside writeDBConfig function
2025-03-31 12:36:19 +02:00
GABRIELNGBTUC
050944f45e
Merge branch 'louislam:master' into master
2025-03-31 12:29:23 +02:00
Gabriel Ngandu-Biseba
8a0d501ffc
Use path.resolve instead of path.join in order to normalize the path.
2025-03-31 12:25:45 +02:00
Gabriel Ngandu-Biseba
35cfd9b257
Use path.resolve instead of path.join in order to normalize the path.
...
Also check if the uploaded file is a .pem
2025-03-31 12:25:28 +02:00
Teror Fox
30f82b9cb4
feat: add notification provider PushPlus ( #5716 )
...
Co-authored-by: Teror Fox <i@trfox.top>
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-03-26 17:31:34 +01:00
RaminMT
b0610c02ac
Add Telegram custom bot api server support ( #5668 )
2025-03-21 04:08:20 +01:00
devlikeapro
6f8f8f955f
Add WhatsApp (WAHA) notification provider ( #5647 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-03-18 13:06:43 +01:00
Sergio Conde Gómez
9857770cc7
feat: rework notification templating and add support for telegram ( #5637 )
2025-03-14 12:51:07 +01:00
Harry
fce824f5a8
feat: Support YZJ notification provider ( #5686 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-03-14 02:40:13 +01:00
Fred Nnaji
230832c382
Update TLS expiration warning ( #5659 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-03-07 21:49:38 +01:00
希亚
784ac9ca35
Modify the "Time" in the AliyunSMS to local time. ( #5582 )
2025-02-01 00:12:09 +01:00
Boro Vukovic
20820f5a5a
chore(deps): upgrade http/https/socks proxy agents ( #5548 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-01-26 14:21:40 +01:00
zappityzap
66908c7055
chore(deps): update nostr notification provider ( #5495 )
...
Co-authored-by: zappityzap <zappityzap@proton.me>
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-01-26 13:58:38 +01:00
DayShift
7a9191761d
fix: make sure that stripping backslashes for notification urls cannot cause catastophic backtracking (ReDOS) ( #5573 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-01-26 11:52:12 +01:00
Elliot Matson
7dc6191b0a
fix: add notification-fallback for better google chat popups ( #5476 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-01-24 18:49:29 +01:00
DayShift
03beef8006
BugFix:Regular Expression in parseDuration Function ( #5563 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2025-01-22 19:03:38 +01:00
Louis Lam
ccede11e1c
1.23.x changes to 2.0 ( #5457 )
2024-12-20 15:46:31 +08:00
Louis Lam
4d16575599
Merge branch 'master' into 1.23.X-to-2
...
# Conflicts:
# package-lock.json
# package.json
2024-12-20 15:38:45 +08:00
Louis Lam
6cfae01a0d
Merge commit from fork
...
* [V1 Only] Change dev server's data path to ./data/v1
* Fix GHSA-2qgm-m29m-cj2h
2024-12-20 15:02:22 +08:00
Louis Lam
efdffca06c
Fix: [MariaDB] Unable to clean up heartbeat data ( #5425 )
...
Co-authored-by: GJS <homelab.api@gmail.com>
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2024-12-12 14:49:01 +08:00
Gabriel Ngandu-Biseba
69c779b382
Remove leftover logging from debugging
2024-12-06 13:58:21 +01:00
Gabriel Ngandu-Biseba
aeffe6d5ad
Add check to prevent user-provided dbConfig.caFilePath.
2024-12-06 13:50:28 +01:00
Gabriel Ngandu-Biseba
30693392e0
Remove linter comments automatically added by editor
2024-12-06 13:33:37 +01:00
Gabriel Ngandu-Biseba
ee6e130403
Remove unused variable
2024-12-06 13:22:30 +01:00
Gabriel Ngandu-Biseba
e73c87cfae
Add support for a user provided CA file to connect to maria/mysql
2024-12-06 11:45:41 +01:00
Gabriel Ngandu-Biseba
0943e5d354
Remove unused config
2024-12-06 11:43:43 +01:00
Gabriel Ngandu-Biseba
69896a7299
Rename the UPTIME_KUMA_DB_SSL_CERT environment variable to a more expressive name
2024-12-06 11:43:25 +01:00
Gabriel Ngandu-Biseba
98ba019cf0
Fix always true if condition
2024-11-29 11:42:06 +01:00
Gabriel Ngandu-Biseba
d2b48a648f
Add support for user provided CA certificate to establish secure connections with a mysql/mariadb server
2024-11-29 11:41:09 +01:00
Luke Thomas
cdb8ad321d
fix: slug input ( #5239 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2024-11-26 01:56:23 +01:00
Ionys
8a432ac937
fix(status page): Make sure the group deletion is correctly handled when groupIDList is empty ( #5340 )
2024-11-12 19:00:09 +01:00
Daan Meijer
13ea190298
only allow for valid urls in slack button ( #5312 )
2024-11-05 20:50:47 +01:00
Louis Lam
5864c6dd88
Fix: Embedded MariaDB startup issue ( #5283 )
2024-11-05 20:25:08 +08:00
Ionys
595b35fb15
fix(tags): Fix the tag deletion ( #5298 )
2024-11-02 13:09:23 +01:00
Louis Lam
ca094296f2
Fix: Knex cannot set a default value for TEXT field (MariaDB) ( #5261 )
2024-10-28 13:16:22 +08:00
Louis Lam
277d6fe0ce
Fix #5087 and fix migration state ( #5260 )
2024-10-27 20:30:44 +08:00
Louis Lam
46d8744fa4
Fix: Docker Healthcheck is not happy during migration ( #5258 )
2024-10-27 13:22:23 +08:00
Louis Lam
4d779cfc69
Data migration and history retention for 2.0.0 ( #5075 )
2024-10-26 20:50:29 +08:00
Easy
d2f71d11d6
Update API URL to compatible with the latest version of ServerChan ( #5227 )
2024-10-22 10:48:51 +02:00
Suven-p
c01494ec33
feat: add RabbitMQ monitor ( #5199 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2024-10-20 15:57:03 +02:00
sctnightcore
d7ffa33950
feat: add notification provider SendGrid ( #5205 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2024-10-18 02:25:23 +02:00
Frank Elsinga
ed6087e233
fix: slack rich notification not working correctly ( #5209 )
2024-10-16 16:50:41 +02:00
Peace
85dfe1f5d1
fix: some errors from the performance optimization ( #5196 )
2024-10-16 13:25:35 +02:00
Erlaan
dda40610c7
feat: new notification provider 46elks ( #5184 )
...
Co-authored-by: Frank Elsinga <frank@elsinga.de>
2024-10-11 11:07:34 +02:00
Arjun Komath
bafca6bd37
feat: support sound and title in TechulusPush ( #5178 )
2024-10-11 00:19:58 +02:00
Dj Isaac
019702f8e5
fix: misspelling of 'address' ( #5180 )
2024-10-10 01:24:32 +02:00
Tanmay Shinde
e8c650797c
refactor: removed unnecessary todo comment, modified jsdoc of utility func ( #5164 )
2024-10-09 09:47:00 +02:00
Louis Lam
eca90a2b00
Revert "feat: structured logging (JSON)" ( #5175 )
2024-10-09 07:43:44 +08:00
Louis Lam
4829ad8c5d
Revert "Extend Prometheus Labels to include tags (requires restart for NEW labels on the monitor to be visible)" ( #5174 )
2024-10-09 07:17:11 +08:00
