Files
dokku/tests/unit
Jose Diaz-Gonzalez ac95225809 fix: prevent host shell injection from app.json cron commands
The docker-local scheduler wrote each app.json cron command verbatim into the dokku user's crontab, where cron's `bash -c` interpreted any shell metacharacters in the command on the host as the dokku user rather than inside the container. The crontab line is now `dokku cron:run <app> <cron-id>`, and the command is resolved from app.json and exec'd inside the container at run time. Commands containing shell operators are also rejected when app.json is validated at deploy time.
2026-05-25 02:14:21 -04:00
..
2026-05-24 16:06:02 -04:00
2026-05-04 13:16:28 -04:00
2026-05-10 21:42:35 -04:00
2017-02-24 12:41:12 -03:00
2024-03-13 07:47:54 -04:00
2024-03-13 07:47:54 -04:00
2024-01-19 03:51:21 -05:00
2024-02-27 14:19:53 -05:00
2024-02-25 15:54:31 -05:00
2025-11-18 17:06:30 -05:00
2025-11-09 20:21:10 -05:00