nezha_domains

Buriburizaemon/nezha_domains

Fork 0

mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 09:40:12 +00:00

Commit Graph

Author	SHA1	Message	Date
naiba	39d398066d	fix(api): redact third-party credentials in ddns/notification list GET /api/v1/ddns and /api/v1/notification returned full objects with plaintext credentials (Cloudflare/TencentCloud secrets, webhook URLs with embedded bot tokens, Authorization headers). Redact these fields in the list responses. Since the frontend edit form repopulates from the list endpoint, the update handlers now treat an empty submitted credential as "no change" and preserve the stored value, preventing accidental secret wipes. Ref: GHSA-ww5p-j6cj-6mqq	2026-06-20 01:54:50 +00:00
naiba	fa7afd475f	chore: bump admin-frontend to v2.0.4, nezha-dash-v1 to v2.0.1	2026-02-19 06:34:02 +00:00

Author

SHA1

Message

Date

naiba

39d398066d

fix(api): redact third-party credentials in ddns/notification list

GET /api/v1/ddns and /api/v1/notification returned full objects with
plaintext credentials (Cloudflare/TencentCloud secrets, webhook URLs
with embedded bot tokens, Authorization headers). Redact these fields
in the list responses.

Since the frontend edit form repopulates from the list endpoint, the
update handlers now treat an empty submitted credential as "no change"
and preserve the stored value, preventing accidental secret wipes.

Ref: GHSA-ww5p-j6cj-6mqq

2026-06-20 01:54:50 +00:00

naiba

fa7afd475f

chore: bump admin-frontend to v2.0.4, nezha-dash-v1 to v2.0.1

2026-02-19 06:34:02 +00:00