Buriburizaemon/nezha_domains
1
0 Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-11-04 08:40:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,010 Commits 1 Branch 2 Tags
b71188f104ee00bbf04b9a040fa0ff0dbf05c53c
Commit Graph
3 Commits
Author SHA1 Message Date
naiba 36b742a7e9 fix: harden dashboard security boundaries 2026-10-01 04:28:34 +00:00
naibaandnaiba/CloudCode e1045ffd30 fix(api): redact profile password hash 
Co-authored-by: naiba/CloudCode <hi+cloudcode@nai.ba>
 2026-06-28 01:09:23 +00:00
naiba 39d398066d fix(api): redact third-party credentials in ddns/notification list 
GET /api/v1/ddns and /api/v1/notification returned full objects with
plaintext credentials (Cloudflare/TencentCloud secrets, webhook URLs
with embedded bot tokens, Authorization headers). Redact these fields
in the list responses.

Since the frontend edit form repopulates from the list endpoint, the
update handlers now treat an empty submitted credential as "no change"
and preserve the stored value, preventing accidental secret wipes.

Ref: GHSA-ww5p-j6cj-6mqq
 2026-06-20 01:54:50 +00:00