Security hardening for authentication, uploads, and public endpoints - #3895

Draft

bbingz wants to merge 85 commits into

siteserver:masterfrom

bbingz:security/huwang-hardening-2026

Commits on May 30, 2026

fix: harden directory containment checks
bbingz
committed
aa43809
fix: harden default web security settings
bbingz
committed
e2aab77
fix: require authorization for database sync
bbingz
committed
8f89194
fix: prevent admin password reset enumeration
bbingz
committed
000f2f4
fix: rate limit anonymous hits updates
bbingz
committed
dbb4b92
fix: prevent admin login sms enumeration
bbingz
committed
7b78e09
fix: invalidate password reset sms codes
bbingz
committed
bbee404
fix: restore TLS certificate validation
bbingz
committed
bc6c02f
fix: update vulnerable package resolutions
bbingz
committed
85033df
fix: block private hosts in remote downloads
bbingz
committed
b71fee5
fix: harden v1 administrator login
bbingz
committed
d03f26c
fix: validate scrawl image payloads
bbingz
committed
c119fe0
fix: constrain form file deletion paths
bbingz
committed
8e62de9
fix: enforce captcha during forced admin login
bbingz
committed
40bcd67
fix: rate limit v1 user login
bbingz
committed
7a15281
fix: sign stl trigger requests
bbingz
committed
f91a375
fix: rate limit stl rendering endpoints
bbingz
committed
c54c03f
fix: sign stl page contents requests
bbingz
committed
aa274d7
fix: sign content download requests
bbingz
committed
1280e4c
fix: invalidate tokens on password change
bbingz
committed
2033839
fix: restrict stl sql to read only queries
bbingz
committed
0e77e17
fix: reject malformed stl page tokens
bbingz
committed
190aa57
fix: validate uploaded image content
bbingz
committed
abd0e7b
fix: validate direct image uploads
bbingz
committed
e6d5719
fix: cap upload request sizes
bbingz
committed
11e63f1
fix: validate v1 content query fields
bbingz
committed
95f0ce3
fix: require permission for v1 user lookup
bbingz
committed
ec68c6a
fix: rate limit agent security key attempts
bbingz
committed
7a12ae7
fix: require content check permission on v1 update
bbingz
committed
f4569e3
fix: enforce content check permissions on editor saves
bbingz
committed
a0d296d
fix: enforce check permissions on content imports
bbingz
committed
69b0b83
fix: require auth for error log details
bbingz
committed
c4a7370
fix: sanitize admin login response
bbingz
committed
39e0e9a
fix: reject jwt tokens in query strings
bbingz
committed
6f60f48
fix: restrict administrator permission changes to super admins
bbingz
committed
ab03864
fix: require super admin for v1 administrator management
bbingz
committed
f418434
fix: restrict site admin permissions to assigned sites
bbingz
committed
d39995f
fix: enforce site access for site management
bbingz
committed
42ab4ba
fix: require site access for editor uploads
bbingz
committed
d384f7e
fix: enforce site access for common editor uploads
bbingz
committed
32c55b2
fix: validate rest downloads against ssrf
bbingz
committed
a99a2f5
fix: sanitize channel group filters
bbingz
committed
4c15caf
fix: escape search highlight regex
bbingz
committed
59316f9
fix: rate limit public sms endpoints
bbingz
committed
0bcc278
fix: require auth for preview routes
bbingz
committed
c4e35ca
fix: avoid persistent cloud token storage
bbingz
committed
fe0e823
fix: add baseline security headers
bbingz
committed
83eb289
fix: bound form value length
bbingz
committed
6fa87b8
fix: store passwords with one-way hashes
bbingz
committed
19497b7
fix: reject unsafe zip entries
bbingz
committed
4ef219d
fix: install plugins from validated staging
bbingz
committed
ada1c63
fix: consume sms codes after verification
bbingz
committed
b74f811
fix: cap zip extracted size
bbingz
committed
c6a9139
fix: rate limit signed trigger requests
bbingz
committed
3b17c9e
fix: validate cloud restore keys
bbingz
committed
23b0435
fix: cap stl include depth
bbingz
committed
f117dea
fix: enable ueditor xss filters
bbingz
committed
5e02200
fix: remove docker example secrets
bbingz
committed
6956689
fix: stop publishing source maps
bbingz
committed
5075afd
fix: remove public ueditor samples
bbingz
committed
93348ad
fix: validate raw stl where clauses
bbingz
committed
4bde771
fix: synchronize rate limit counters
bbingz
committed
4d0c48b
fix: pin npm transitive security fixes
bbingz
committed
7d694a3
fix: lock npm security overrides
bbingz
committed
feac6a0
fix: replace vulnerable npm build packages
bbingz
committed
c41d311
fix: skip win32 icons on linux builds
bbingz
committed
a9e8e18
fix: use npm lockfile v2 for ci scans
bbingz
committed
17e18c0
fix: use supported dotnet container bases
bbingz
committed
f3237e1
test: isolate web integration secrets
bbingz
committed
74ae278
fix: regenerate windows application icons
bbingz
committed
bafbfa9
fix: disable broken win32 icon resources
bbingz
committed
fb5e0b5
ci: skip release uploads in pull requests
bbingz
committed
471cedf
ci: only publish release artifacts on master
bbingz
committed
c56b3d9
ci: treat unresolved oss variables as unavailable
bbingz
committed
88fb6fd
fix: pin nginx image to stable slim base
bbingz
committed
5ba0c98
fix: align aspnet test packages with dotnet 8
bbingz
committed
f5f1deb
fix: run dotnet containers as non-root
bbingz
committed
ede0f79
fix: pin docker compose service images
bbingz
committed
318667f
fix: add lockfile for web extension manifest
bbingz
committed
b6c376b
fix: declare non-root docker users
bbingz
committed
9ab5123
fix: refresh vulnerable nuget dependencies
bbingz
committed
874688b
fix: add docker health checks
bbingz
committed
4216af1
fix: pin container image references
bbingz
committed
e3cbbaf
fix: declare root package license
bbingz
committed
42b9f05
fix: move tests to xunit v3
bbingz
committed
45b15be