Mauricio Siu 92310ddb14 fix(security): base64-encode remote traefik YAML and escape config paths ...

writeTraefikConfigRemote piped the stringified YAML through echo '...' where a
single quote in any label/host/serviceName broke out (GHSA-478p). Encode it as
base64 like the other writers, and quote() every configPath used in remote
rm/cat/redirect commands (including the input.path-derived ones).

2026-07-20 16:49:48 -06:00

..

server

fix(security): base64-encode remote traefik YAML and escape config paths

2026-07-20 16:49:48 -06:00