github/dokku
0
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
Files
1a376c362215a5c7044a08b3e3905b1a5fddc821
dokku/tests/unit
History
Jose Diaz-Gonzalez 1a376c3622 fix: prevent command injection via docker options eval 
Values supplied through docker options, `--ttl-seconds`, and `-e` flowed into a Bash `eval` during build, deploy, and run, letting a low-privileged user execute arbitrary commands on the host as the dokku user. These arguments are now tokenized and passed through to the container verbatim, without shell expansion. A one-time migration repairs stored labels whose backticks were saved with a stray backslash so Traefik-style rules stay valid on the next deploy.
2026-07-19 01:42:12 -04:00
..
app-json-2.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
app-json-3.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
app-json-4.bats
chore: make the postdeploy task name more clear
2025-11-20 00:42:49 -05:00
app-json-5.bats
feat: add post-create support for env key in app.json
2026-04-26 22:43:32 -04:00
app-json.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
apps_1.bats
feat: add --format json support to apps:list
2026-07-06 11:50:56 -04:00
apps_2.bats
Merge pull request #8493 from dokku/6760-build-empty-nginx-config-when-there-are-no-web-processes
2026-04-26 04:08:17 -04:00
archive-security.bats
fix: split report global keys into raw and computed across plugins
2026-05-23 00:05:33 -04:00
build-env.bats
refactor: remove public exposure of DOKKU_APP_TYPE in favor of builder detected property
2025-08-21 23:59:41 -04:00
builder-dockerfile.bats
test: backfill raw/global/computed report triplet coverage across plugins
2026-05-23 00:05:33 -04:00
builder-herokuish.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
builder-lambda.bats
test: backfill raw/global/computed report triplet coverage across plugins
2026-05-23 00:05:33 -04:00
builder-nixpacks.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
builder-pack.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
builder-railpack.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
builder.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
buildpacks.bats
feat: allow replacing buildpack list atomically
2026-07-07 18:37:38 -04:00
builds.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
caddy-vhosts.bats
feat: port vhost proxy :report subcommands to golang
2026-07-07 06:29:01 -04:00
caddy.bats
refactor: rename computed-* helpers, expose computed vector and network keys
2026-05-23 04:47:03 -04:00
certs.bats
fix: parse cert CN and subject on OpenSSL 3.x
2026-07-10 15:05:27 -04:00
checks.bats
refactor: rename computed-* helpers, expose computed vector and network keys
2026-05-23 04:47:03 -04:00
client.bats
fix: properly use $1 as default value
2025-11-20 02:21:20 -05:00
config-oddities.bats
fix: reference env from config dir
2026-04-27 01:05:41 -04:00
config.bats
chore: run shfmt
2026-05-24 16:06:02 -04:00
core_1.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
core_2.bats
chore: remove now invalid tests
2026-05-04 13:16:28 -04:00
cron.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
docker-image-healthcheck.bats
chore: run shfmt
2026-05-10 21:42:35 -04:00
docker-options-2.bats
feat: expose docker-options as structured lists in JSON report
2026-07-07 19:49:17 -04:00
docker-options.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
domain_ssl.tar
…
domains.bats
feat: port checks and domains :report subcommands to golang
2026-07-07 06:43:31 -04:00
events.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
git_1.bats
refactor: rename computed-* helpers, expose computed vector and network keys
2026-05-23 04:47:03 -04:00
git_2.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
git_3.bats
fix: split report global keys into raw and computed across plugins
2026-05-23 00:05:33 -04:00
git_4.bats
feat: add a method to force build when re-using an image with git:from-image
2026-01-08 02:46:53 -05:00
git_5.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
git_6.bats
chore: rename test files
2024-03-13 07:47:54 -04:00
git_7.bats
chore: rename test files
2024-03-13 07:47:54 -04:00
haproxy-vhosts.bats
feat: port vhost proxy :report subcommands to golang
2026-07-07 06:29:01 -04:00
haproxy.bats
refactor: rename computed-* helpers, expose computed vector and network keys
2026-05-23 04:47:03 -04:00
init.bats
tests: use /bin/bash -c to execute commands in init tests
2026-05-09 10:48:29 -04:00
logs.bats
fix: separate docker-args outputs to avoid arg collisions
2026-05-28 04:16:55 -04:00
network.bats
feat: expose whether a network was created by dokku
2026-07-08 00:03:29 -04:00
nginx-vhosts_1.bats
fix: report info-flag should not error when app undeployed
2026-05-10 22:15:27 -04:00
nginx-vhosts_2.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
nginx-vhosts_3.bats
fix: update the test
2024-01-19 03:51:21 -05:00
nginx-vhosts_4.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
nginx-vhosts_5.bats
fix: move proxy-port properties to proxy plugin and fix CI failures
2026-04-25 17:19:42 -04:00
nginx-vhosts_6.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
nginx-vhosts_7.bats
feat: warn on deprecated listen http2 in custom nginx templates
2026-05-25 05:32:11 -04:00
nginx-vhosts_8.bats
refactor: consolidate property fetching for nginx plugin into golang codebase
2024-02-06 00:42:48 -05:00
nginx-vhosts_9.bats
tests: update test
2024-02-27 14:19:53 -05:00
nginx-vhosts_10.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
nginx-vhosts_11.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
nginx-vhosts_12.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
nginx-vhosts_13.bats
fix(tests): update config and nginx tests for post-create side effects
2026-04-24 05:02:49 -04:00
nginx-vhosts_14.bats
fix: gate ssl_reject_handshake behind nginx 1.19.4
2026-05-09 16:32:30 -04:00
nginx-vhosts_15.bats
docs: document nginx validate-config load_module override
2026-07-07 23:33:59 -04:00
nginx-vhosts_16.bats
test: relax ssl_certificate occurrence count in nginx-vhosts_16
2026-04-30 17:30:03 -04:00
nginx-vhosts_properties.bats
fix: expose remaining settable properties via :report
2026-05-27 04:26:12 -04:00
openresty-vhosts.bats
feat: port vhost proxy :report subcommands to golang
2026-07-07 06:29:01 -04:00
openresty.bats
feat: split openresty report into raw/computed/global
2026-05-28 00:03:47 -04:00
osx_ssl_tarred.tar
…
plugin.bats
feat: add --format json support to plugin:list
2026-07-07 05:17:40 -04:00
ports.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
proxied-app.bats
tests: make it possible to specify an alternative base domain for tests
2023-08-05 20:58:26 -04:00
proxy.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
ps-dockerfile-1.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
ps-dockerfile-2.bats
tests: add tests for scaling without restarting untouched process types
2025-06-30 01:48:09 -04:00
ps-general-1.bats
feat: add --format json support to ps:scale
2026-07-06 13:57:19 -04:00
ps-general-2.bats
tests: update expected output
2025-12-25 18:34:39 -05:00
ps-herokuish-1.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
ps-herokuish-2.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
registry_2.bats
chore: run shfmt
2026-05-25 16:07:55 -04:00
registry.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
repo.bats
fix: remove reference to cache dir
2024-02-25 15:54:31 -05:00
report.bats
test: bump report.bats column width for renamed ps flags
2026-05-26 20:33:36 -04:00
resource_1.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
resource_2.bats
tests: add assertions to various bats tests
2023-08-05 10:58:57 -04:00
resource_3.bats
test: add run_plugn_trigger and run_plugin_script bats helpers
2026-05-07 12:47:00 -04:00
run_1.bats
chore: fix lint issues
2025-11-18 17:06:30 -05:00
run_2.bats
fix: prevent command injection via docker options eval
2026-07-19 01:42:12 -04:00
scheduler-docker-local.bats
fix: split report global keys into raw and computed across plugins
2026-05-23 00:05:33 -04:00
scheduler-k3s-1.bats
fix: remove extra _
2025-11-09 20:21:10 -05:00
scheduler-k3s-2.bats
test: fix issue where teardown was not being called
2025-11-09 23:16:39 -05:00
scheduler-k3s-3.bats
tests: add test for security context conversions
2025-09-14 02:19:25 -04:00
scheduler-k3s-4.bats
fix: only emit keda fallback when a non-cpu/memory trigger exists
2026-04-29 01:10:34 -04:00
scheduler-k3s-annotations.bats
feat: expose scheduler-k3s autoscaling-auth state for read-back
2026-07-07 18:07:39 -04:00
scheduler-k3s-autoscaling-auth.bats
feat: expose scheduler-k3s autoscaling-auth state for read-back
2026-07-07 18:07:39 -04:00
scheduler-k3s-certs-2.bats
fix: delete the tls app chart when the app is deleted
2026-01-10 02:52:01 -05:00
scheduler-k3s-certs-deploy.bats
feat: use certificates imported by certs plugin when deploying via scheduler-k3s
2026-01-08 01:05:40 -05:00
scheduler-k3s-certs-redirect.bats
feat: enable compression middleware for traefik when using scheduler-k3s
2026-05-27 17:57:15 +02:00
scheduler-k3s-certs.bats
feat: use certificates imported by certs plugin when deploying via scheduler-k3s
2026-01-08 01:05:40 -05:00
scheduler-k3s-charts-1.bats
fix: persist scheduler-k3s chart overrides as JSON maps
2026-05-31 01:54:28 -04:00
scheduler-k3s-charts-2.bats
fix: persist scheduler-k3s chart overrides as JSON maps
2026-05-31 01:54:28 -04:00
scheduler-k3s-cnb.bats
fix: hash scheduler-k3s cron-id label to fit Kubernetes' 63-byte cap
2026-05-24 16:52:22 -04:00
scheduler-k3s-compression.bats
feat: enable compression middleware for traefik when using scheduler-k3s
2026-05-27 17:57:15 +02:00
scheduler-k3s-dockerfile.bats
fix: hash scheduler-k3s cron-id label to fit Kubernetes' 63-byte cap
2026-05-24 16:52:22 -04:00
scheduler-k3s-herokuish.bats
fix: hash scheduler-k3s cron-id label to fit Kubernetes' 63-byte cap
2026-05-24 16:52:22 -04:00
scheduler-k3s-labels.bats
feat: expose scheduler-k3s autoscaling-auth state for read-back
2026-07-07 18:07:39 -04:00
scheduler-k3s-preview.bats
test: allow multiple 'has been added' matches in preview test 3
2026-06-03 01:53:30 -04:00
scheduler-k3s-report.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
scheduler-k3s-secrets-deploy.bats
fix: thread secret annotations and labels through new helm charts
2026-04-29 12:18:06 -04:00
scheduler-k3s-secrets.bats
fix: split env config and image pull secret into separate helm releases
2026-04-29 12:18:03 -04:00
scheduler.bats
fix: align Go-plugin :report JSON keys with bash-strip convention
2026-05-27 07:17:00 -04:00
server_ssl_sans.tar
fix: use correct path within the ssl tarballs
2023-01-16 01:50:52 -05:00
server_ssl_wildcard.tar
fix: use correct path within the ssl tarballs
2023-01-16 01:50:52 -05:00
server_ssl.tar
fix: use correct path within the ssl tarballs
2023-01-16 01:50:52 -05:00
ssh_keys.bats
chore: run shfmt against all test files
2022-07-21 14:57:42 -04:00
storage.bats
test(storage): add out-of-bounds chown coverage for go code and script
2026-07-08 19:38:08 +02:00
test_helper.bash
test: route run_plugn_trigger through dokku plugin:trigger
2026-05-12 22:36:47 -04:00
trace.bats
…
traefik-vhosts.bats
feat: port vhost proxy :report subcommands to golang
2026-07-07 06:29:01 -04:00
traefik.bats
fix: expose remaining settable properties via :report
2026-05-27 04:26:12 -04:00
version.bats
…