Jose Diaz-Gonzalez ac95225809 fix: prevent host shell injection from app.json cron commands ...

The docker-local scheduler wrote each app.json cron command verbatim into the dokku user's crontab, where cron's `bash -c` interpreted any shell metacharacters in the command on the host as the dokku user rather than inside the container. The crontab line is now `dokku cron:run <app> <cron-id>`, and the command is resolved from app.json and exec'd inside the container at run time. Commands containing shell operators are also rejected when app.json is validated at deploy time.

2026-05-25 02:14:21 -04:00

..

entering-containers.md

fix: automatically select a container type if none is specified

2024-09-23 21:41:02 -04:00

one-off-tasks.md

feat: implement cron and one-off run task TTLs

2025-11-18 16:46:31 -05:00

process-management.md

docs: add settable properties tables to plugin docs

2026-05-23 22:45:20 -04:00

scheduled-cron-tasks.md

fix: prevent host shell injection from app.json cron commands

2026-05-25 02:14:21 -04:00