Jose Diaz-Gonzalez 2df0791fcd fix: prevent tar symlink traversal in archive extraction ...

Archives passed to git:from-archive and certs:add were extracted without symlink or path validation, allowing a crafted archive to write arbitrary files anywhere writable by the dokku user via symlink traversal. Extraction now pre-scans entries for absolute paths, parent traversal, and unsafe symlinks, applies the GNU tar `--no-unsafe-links` flag when available, and validates symlinks after extraction.

2026-05-09 12:54:42 -04:00

..

domains.md

docs: document plugin properties migrated from env vars

2026-04-30 17:02:39 -04:00

environment-variables.md

docs: document plugin properties migrated from env vars

2026-04-30 17:02:39 -04:00

ssl.md

fix: prevent tar symlink traversal in archive extraction

2026-05-09 12:54:42 -04:00