rcourtman
|
cf26ed7f12
|
security: Add request body size limits to remaining API handlers
Add http.MaxBytesReader to 8 additional handlers to complete API
hardening against memory exhaustion attacks:
- guest_metadata.go: HandleUpdateMetadata (16KB)
- notification_queue.go: RetryDLQItem, DeleteDLQItem (8KB each)
- temperature_proxy.go: HandleRegister (8KB)
- host_agents.go: HandleReport (256KB)
- updates.go: HandleApplyUpdate (8KB)
- docker_metadata.go: HandleUpdateMetadata (16KB)
- system_settings.go: UpdateSystemSettings (64KB)
All API handlers that decode JSON request bodies now have size limits.
|
2025-12-02 16:47:13 +00:00 |
|
rcourtman
|
8276ae837e
|
chore: cleanup proxmox IsAuthError and remove stray comment
- Make IsAuthError unexported (isAuthError) since it's only used internally
- Remove stray '// test comment' from docker_metadata.go
|
2025-11-27 08:59:01 +00:00 |
|
rcourtman
|
907989d9b1
|
chore: remove unused DockerMetadataHandler.Reload method
|
2025-11-27 05:14:56 +00:00 |
|
rcourtman
|
01f7d81d38
|
style: fix gofmt formatting inconsistencies
Run gofmt -w to fix tab/space inconsistencies across 33 files.
|
2025-11-26 23:44:36 +00:00 |
|
rcourtman
|
b3285c05c8
|
Consolidate pending changes
- Add Docker metadata test comment
- Update alerts configuration and thresholds
- Enhance config file watcher
- Update documentation
- Refine settings UI
|
2025-10-28 23:20:44 +00:00 |
|
rcourtman
|
99b11760ac
|
Implement Docker metadata API endpoints
Add backend support for storing and managing Docker resource metadata:
- Create DockerMetadataStore for managing Docker container/service metadata
- Implement DockerMetadataHandler with GET/PUT/DELETE operations
- Register /api/docker/metadata routes with proper authentication
- Store metadata in docker_metadata.json file
- Validate custom URLs (http/https scheme, valid host)
- Supports resource IDs in format: {hostId}:container:{containerId}
Enables the frontend Docker URL editing feature to persist data.
|
2025-10-28 22:56:53 +00:00 |
|