Jose Diaz-Gonzalez 1a376c3622 fix: prevent command injection via docker options eval ...

Values supplied through docker options, `--ttl-seconds`, and `-e` flowed into a Bash `eval` during build, deploy, and run, letting a low-privileged user execute arbitrary commands on the host as the dokku user. These arguments are now tokenized and passed through to the container verbatim, without shell expansion. A one-time migration repairs stored labels whose backticks were saved with a stray backslash so Traefik-style rules stay valid on the next deploy.

2026-07-19 01:42:12 -04:00

..

scheduler-deploy-process

fix: prevent command injection via docker options eval

2026-07-19 01:42:12 -04:00

scheduler-deploy-process-container

fix: prevent command injection via docker options eval

2026-07-19 01:42:12 -04:00