fanhuadesenlinnn/cloudpods
1
0
Fork 0
mirror of https://hubproxy.babadafafafafa.cn/https://github.com/yunionio/cloudpods.git synced 2026-09-21 00:24:07 +08:00
Code Issues Packages Projects Releases Wiki Activity
21,102 Commits 27 Branches 687 Tags
master
Commit Graph

4 Commits

Author SHA1 Message Date
Jian Qiu
bb4e9a4e13 fix(webconsole): harden climc shell command execution against injection (#25476) 
- Run ssh via exec.Command argv instead of "bash -c" string
  interpolation, so user-supplied fields can no longer escape into
  local shell commands on the webconsole server
- Quote every interpolated value (env, command, args) as a POSIX
  shell word, so they stay literal data on the remote shell
- Validate username charset and limit target_ip to climc pod or container
- Add unit tests covering injection payloads

Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
Co-authored-by: Claude <noreply@anthropic.com>
 2026-09-03 10:51:51 +08:00
Zexi Li
472c5f8e04 fix(webconsole,apigateway): execute container command by climc ssh way (#21812) 2024-12-16 18:49:42 +08:00
Zexi Li
c6b655ab3f fix(climc,webconsole): use OS_AUTH_TOKEN for cloud shell running inside compose environment (#20650) 2024-06-26 12:12:22 +08:00
Zexi Li
0aeaf6370d fix(webconsole,climc): cloud shell within docker compose environment 2023-08-01 00:26:05 +08:00