feature: add backups storage provider#26
Merged
jhd3197 merged 21 commits intojhd3197:devfrom Mar 3, 2026
Merged
Conversation
Revise docs/CI config
Add multi-server agent system, remote terminal, and security features
Fix agent build pipeline and packaging for all platforms
System tray app, IPC server, and dark/light theme support
Add WordPress site management with environments, database sync, and Git integration
Add WordPress environment pipeline, template icons, onboarding wizard & developer mode
Enhance uninstall script with detailed cleanup steps
Add lightweight auto-migration for missing DB columns
Add multi-site WordPress hub with environments and dev path management
Add tracking for install, update, and uninstall events
Replace jwt_required with RBAC, use socket auth
Relocate language links in README files
Use system utils for commands and services
Add system utils CI workflow and integration tests
Add Bandit + Safety security scanning to CI and fix vulnerable deps
Fix remaining vulnerable dependencies flagged by Safety CI
Update Discord links and ignore .vscode
Update Discord invite links
Containerize the full stack and fix repo references
Align backups API, services, frontend, and dev scripts for new backup storage functionality. Made-with: Cursor
Add cross-platform development launchers (dev.sh, dev.ps1) and a frontend ESLint flat config; remove legacy scripts and update docs to use ./dev.sh. Harden backup and storage logic: require admin for backup endpoints, use realpath checks to ensure backup paths stay inside the backup dir, prevent path traversal during archive extraction, and generate schedule IDs with UUIDs. Improve StorageProviderService with masked-secret handling, set restrictive file perms on config, validate S3/B2 endpoint URLs to mitigate SSRF (urlparse + ipaddress), avoid following symlinks during uploads, and adjust MD5 usage. Update Bandit config to skip expected noisy checks and tweak .gitignore entries and contributing docs to target the dev branch and the new dev scripts.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Align backups API, services, frontend, and dev scripts for new backup storage functionality.
Made-with: Cursor