Files
dokku/docs
Jose Diaz-Gonzalez ac95225809 fix: prevent host shell injection from app.json cron commands
The docker-local scheduler wrote each app.json cron command verbatim into the dokku user's crontab, where cron's `bash -c` interpreted any shell metacharacters in the command on the host as the dokku user rather than inside the container. The crontab line is now `dokku cron:run <app> <cron-id>`, and the command is resolved from app.json and exec'd inside the container at run time. Commands containing shell operators are also rejected when app.json is validated at deploy time.
2026-05-25 02:14:21 -04:00
..
2022-09-05 21:20:16 -04:00
2026-05-25 00:37:37 +00:00
2026-05-25 00:37:37 +00:00
2026-05-25 00:37:37 +00:00
2026-05-25 00:37:37 +00:00
2026-05-25 00:37:37 +00:00
2026-05-25 00:37:37 +00:00

Dokku Documentation

This documentation covers the installation, configuration, and usage of Dokku - a Docker-powered PaaS that provides a Heroku-like experience.

Getting Started

Deployment

Deployment Methods

  • Git - Deploy via git push
  • Archive - Deploy from tar/zip archives
  • Image - Deploy from Docker images

Builders

Schedulers

Continuous Integration

Configuration

Networking

Proxies

Processes

Advanced Usage

Development

Community

  • Plugins - Community-maintained plugins
  • Clients - API clients and tools

Enterprise

  • Dokku Pro - Commercial features and support

Appendices

Migration Guides

File Formats