Commit graph

14 commits

Author SHA1 Message Date
Vasilii Ermilov
911db4c6a2
Add whitelist to normalizeStoreName to avoid injection
This PR introduces a whitelist check to mitigate SQL injection risks when handling user input. Previously, user-controlled input was being used directly in dynamic SQL queries, which could allow an attacker to manipulate database queries.
E.g. https://github.com/lmg-anon/mikupad/blob/HEAD/server/server.js#L285
2025-02-27 11:29:47 -05:00
saood06
5e9a0baba1
Merge branch 'lmg-anon:main' into main 2024-12-16 21:03:48 -06:00
lmg-anon
b05fe94c51
Add basic AI Horde support 2024-12-15 20:25:45 -03:00
saood06
f2a4d3b75a
Multi file import and only keep active session in sessions object 2024-12-08 18:40:43 -06:00
lmg-anon
66a3597e9f
Expand server proxy header blacklist 2024-07-24 21:09:55 -03:00
lmg-anon
2b7f0b09cf Add version check to server 2024-05-22 12:03:10 -03:00
lmg-anon
21635115cb
Update server for multi-store support 2024-05-20 15:35:52 -03:00
lmg-anon
370dc9f63e Add password support to mikupad server 2024-04-23 19:27:36 -03:00
lmg-anon
b161885b3b Open browser by default on server start 2024-04-23 12:45:50 -03:00
lmg-anon
06911073e4 Use a more robust way to pipe errors 2024-04-15 19:46:47 -03:00
lmg-anon
51cfd1f7ec Add start.sh 2024-04-15 19:15:54 -03:00
lmg-anon
f7cf703355 Update server.js 2024-04-15 18:53:41 -03:00
lmg-anon
919fff399c Use the configured session endpoint rather than localhost 2024-02-19 20:10:58 -03:00
lmg-anon
e9bdf15a19 Implement Session Server 2024-02-19 19:27:08 -03:00