Mauricio Siu eeb6e7b8ea fix(security): escape S3/rclone args and restore paths to prevent command injection ...

Wrap S3 credential flags (getS3Credentials + destination.testConnection), the
listBackupFiles search path, and every restore backupPath/backupFile with
shell-quote's quote() so $(), backticks, quotes and spaces in destination
fields or backupFile can no longer break out of the rclone shell commands.

2026-07-20 16:11:16 -06:00

..

compose.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

index.ts

feat(libsql): add support for libsql database backups and restores

2026-03-19 16:00:39 -06:00

libsql.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

mariadb.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

mongo.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

mysql.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

postgres.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

utils.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00

web-server.ts

fix(security): escape S3/rclone args and restore paths to prevent command injection

2026-07-20 16:11:16 -06:00