Releases: rickicode/DockerAZ
Releases · rickicode/DockerAZ
Release list
v1.2.0
Security
- Authentication: Completely rewritten Authentication system; migrated from PASETO to JWT (HS256).
- Implemented Token Versioning for immediate session revocation upon password change.
- Enabled 30-Day Sessions for "Remember Me" login.
- Secured
JWT_SECRETgeneration usingcrypto/rand.
- WebSocket: Fixed Critical Cross-Site WebSocket Hijacking (CSWSH) vulnerability by enforcing strict Origin checks.
- WebSocket: Resolved Race Conditions in console streaming (fixed panic/crash risks).
- Stability: Fixed Goroutine Leak in Rate Limiter middleware (preventing DoS).
- Validation: Hardened Samba and File Manager inputs against Command Injection and Path Traversal.
Improved
- Logging: Implemented Log Rotation (2MB limit) to prevent disk space exhaustion.
- Performance: Parallelized Docker Network listing for faster dashboard performance.
- Robustness: Fixed Context Leaks in Image Pulling and Atomicity issues in Service Deletion.