Andras Bacsai 1a2a5362ad fix(security): secure remote command secrets and clone volume data

2026-10-27 09:47:18 +01:00

..

AddServerTimingHeaders.php

…

ApiAbility.php

refactor(api): check token abilities through the token in ApiAbility (#12193)

2026-10-18 23:16:38 +02:00

ApiAllowed.php

fix(mcp): enforce allowed IPs on the MCP endpoint

2026-10-15 23:41:17 +02:00

ApiIpAllowed.php

fix(api): use the Cloudflare client IP for allowed IPs and audit logs

2026-10-25 23:47:39 +01:00

ApiSensitiveData.php

…

Authenticate.php

…

CanAccessTerminal.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

CanCreateResources.php

…

CanUpdateResource.php

…

CheckForcePasswordReset.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

ConfigurePasskeys.php

feat(auth): add passkey sign-in

2026-10-13 04:01:40 +00:00

DecideWhatToDoWithUser.php

…

EncryptCookies.php

…

EnsureMcpEnabled.php

…

EnsureTeamMcpEnabled.php

…

EnsureTokenBelongsToCurrentTeamMember.php

…

KeepConcurrentTeamSwitch.php

chore: merge main into release/v4.5 (#12192)

2026-10-18 23:43:20 +02:00

PreventRequestsDuringMaintenance.php

…

RedirectIfAuthenticated.php

feat(mcp): add REST-backed resource management tools (#12163)

2026-10-14 13:26:12 +02:00

RequirePassword.php

fix(auth): let OAuth-only users enable 2FA without a password confirmation

2026-10-02 16:01:10 +02:00

RequireTeamTwoFactor.php

fix(security): secure remote command secrets and clone volume data

2026-10-27 09:47:18 +01:00

TrimStrings.php

…

TrustProxies.php

…

UseSessionTeamApiToken.php

feat(canvas): add interactive resource views and team avatars (#12160)

2026-10-14 09:28:10 +02:00

ValidateSignature.php

…

VerifyCsrfToken.php

…