Commit Graph

Select branches

Hide Pull Requests

fix/include-mail-tree

main

#1

Mono Color

• 228eb94ad5 Merge pull request 'ci: build through the internal package cache; pin almalinux base by digest' (#1) from ci/pkg-cache into main main jknapp 2026-10-22 14:52:20 +00:00
• 517a091539 ci: build through the internal package cache; pin almalinux base by digest shadowdaoandClaude Opus 5.5 2026-10-22 07:22:15 -07:00
• fc1b7e2d3c Move PHP from Remi 8.4 to 8.5 (security update) fix/include-mail-tree shadowdaoandClaude Opus 5.5 2026-10-22 05:59:33 -07:00
• 36d4949d34 extract: own-account links judged re-rooted, normalized, for the trusted username only (N2-1 review 2) shadowdaoandClaude Opus 5.5 2026-10-20 10:51:17 -07:00
• 72b8fa9d08 extract: post-extract realpath check of every symlink; classifier refuses link chains (N2-1 review) shadowdaoandClaude Opus 5.5 2026-10-20 10:47:04 -07:00
• a226b496a2 scan-symlinks: relative targets escaping the archive or the homedir are DANGEROUS (N2-1) shadowdaoandClaude Opus 5.5 2026-10-20 10:42:15 -07:00
• 4a43d26de7 extract: mail-tree policy covers ANY top-level dir, not just cpmove-* (I-1) shadowdaoandClaude Opus 5.5 2026-10-20 09:59:41 -07:00
• d4a63fba0a extract: verify always runs, failures remove the extract, walk fails closed shadowdaoandClaude Opus 5.5 2026-10-20 09:18:34 -07:00
• 52b1e656c3 extract: refuse parser-differential archives; post-extract link check is the authority shadowdaoandClaude Opus 5.5 2026-10-20 09:13:26 -07:00
• 4788ca4957 extract: strip every symlink and boundary-crossing hard link in the mail tree shadowdaoandClaude Opus 5.5 2026-10-20 09:09:10 -07:00
• 9232114af4 tests: mail-tree fixture + host-side run-tests.sh shadowdaoandClaude Opus 5.5 2026-10-20 09:04:44 -07:00
• 8217397154 extract: opt-in mail tree (IMPORT_INCLUDE_MAIL=true) + mail_included marker shadowdaoandClaude Opus 5.5 2026-10-20 09:04:44 -07:00
• 08b995a29c scan-dbs: stream the SQL file instead of loading 5GB+ into memory Claude (bootstrap)andClaude Opus 4.7 2026-05-31 20:31:34 -07:00
• 4888f85b54 scan-files: silence open_basedir warnings during walk Claude (bootstrap)andClaude Opus 4.7 2026-05-31 12:08:40 -07:00
• 9652a71816 extract: skip cpmove-*/homedir/mail tree Claude (bootstrap)andClaude Opus 4.7 2026-05-31 11:57:32 -07:00
• cda432e808 scan-files: skip symlinks during file walk to avoid open_basedir aborts Claude (bootstrap)andClaude Opus 4.7 2026-05-31 11:40:44 -07:00
• a60bf53a4a fix: move EXTRACT_DIR + WORK_DIR off tmpfs onto disk-backed bind mount Claude (bootstrap)andClaude Opus 4.7 2026-05-31 11:29:31 -07:00
• db78a36935 sanitize-dont-refuse: strip dangerous symlinks via tar --exclude Claude (bootstrap)andClaude Opus 4.7 2026-05-31 11:13:57 -07:00
• 60a232c54a scan-symlinks: tighten DANGEROUS prefix list to actual destruction class Claude (bootstrap)andClaude Opus 4.7 2026-05-31 10:07:23 -07:00
• 5e206edc50 ci: lint inside built image at /scripts/ instead of bind-mounting host $PWD Claude (bootstrap)andClaude Opus 4.7 2026-05-31 08:44:55 -07:00
• cff68569cb ci: lint scripts directly on runner instead of via docker-in-docker Claude (bootstrap)andClaude Opus 4.7 2026-05-31 08:35:54 -07:00
• b4ecdbc3b5 ci: trigger on main branch (renamed from trunk) Claude (bootstrap)andClaude Opus 4.7 2026-05-31 08:26:45 -07:00
• 5487dfc8f1 Initial bootstrap: cpanel-importer sanitization sandbox Claude (bootstrap)andClaude Opus 4.7 2026-05-30 19:56:57 -07:00