Files
dokku/docs
Jose Diaz-Gonzalez 2df0791fcd fix: prevent tar symlink traversal in archive extraction
Archives passed to git:from-archive and certs:add were extracted without symlink or path validation, allowing a crafted archive to write arbitrary files anywhere writable by the dokku user via symlink traversal. Extraction now pre-scans entries for absolute paths, parent traversal, and unsafe symlinks, applies the GNU tar `--no-unsafe-links` flag when available, and validates symlinks after extraction.
2026-05-09 12:54:42 -04:00
..
2026-05-07 17:29:53 +00:00
2026-05-07 17:29:53 +00:00
2026-05-07 17:29:53 +00:00
2026-05-07 17:29:53 +00:00
2026-05-07 17:29:53 +00:00
2026-05-07 17:29:53 +00:00

Dokku Documentation

This documentation covers the installation, configuration, and usage of Dokku - a Docker-powered PaaS that provides a Heroku-like experience.

Getting Started

Deployment

Deployment Methods

  • Git - Deploy via git push
  • Archive - Deploy from tar/zip archives
  • Image - Deploy from Docker images

Builders

Schedulers

Continuous Integration

Configuration

Networking

Proxies

Processes

Advanced Usage

Development

Community

  • Plugins - Community-maintained plugins
  • Clients - API clients and tools

Enterprise

  • Dokku Pro - Commercial features and support

Appendices

Migration Guides

File Formats