a96f12dcb6
ci/woodpecker/push/woodpecker Pipeline was successful
- Fix QuickStartWizard error matching (services wrap errors in new Error(), losing err.response; now checks err.message as fallback) - Add shellEscape() to all remaining unescaped CLI commands (removeUser, enableUser, disableUser, deletePolicy, attachPolicy, createPolicy) - Fix inconsistent cookie secure flag in logout endpoint - Add HTML escaping in email report templates to prevent XSS - Add IP validation on token refresh to enforce IP binding - Harden email recipient validation against header injection - Add CSV injection prevention in report export - Add JWT_SECRET minimum length validation (32 chars) in production - Update bcrypt 5.x→6.x, nodemailer 6.x→8.x, fix all backend npm vulns - Redesign UI: new theme (IBM Plex Sans, MinIO-inspired palette), improved login page, dashboard with skeleton loaders, refined sidebar navigation - Add missing i18n keys for login and user menu (DE + EN) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
53 lines
1.3 KiB
JSON
53 lines
1.3 KiB
JSON
{
|
|
"name": "minio-webui-backend",
|
|
"version": "1.0.0",
|
|
"description": "MinIO WebUI Backend API",
|
|
"main": "src/app.js",
|
|
"scripts": {
|
|
"start": "node src/app.js",
|
|
"dev": "nodemon src/app.js",
|
|
"dev:node": "node --watch src/app.js",
|
|
"test": "jest --coverage",
|
|
"lint": "eslint src/",
|
|
"lint:fix": "eslint src/ --fix",
|
|
"hash-password": "node scripts/hash-password.js",
|
|
"generate-password": "node generate-password.js",
|
|
"postinstall": "npm rebuild bcrypt --build-from-source"
|
|
},
|
|
"keywords": [
|
|
"minio",
|
|
"api",
|
|
"backend"
|
|
],
|
|
"author": "",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"bcrypt": "^6.0.0",
|
|
"compression": "^1.7.4",
|
|
"cookie-parser": "^1.4.6",
|
|
"cors": "^2.8.5",
|
|
"dotenv": "^16.3.1",
|
|
"express": "^4.18.2",
|
|
"express-rate-limit": "^7.1.5",
|
|
"express-validator": "^7.0.1",
|
|
"helmet": "^7.1.0",
|
|
"ip-range-check": "^0.2.0",
|
|
"jsonwebtoken": "^9.0.2",
|
|
"morgan": "^1.10.0",
|
|
"multer": "^1.4.5-lts.1",
|
|
"node-cron": "^3.0.3",
|
|
"nodemailer": "^8.0.2",
|
|
"winston": "^3.11.0",
|
|
"winston-daily-rotate-file": "^4.7.1"
|
|
},
|
|
"devDependencies": {
|
|
"eslint": "^8.56.0",
|
|
"jest": "^29.7.0",
|
|
"nodemon": "^3.0.2",
|
|
"supertest": "^6.3.3"
|
|
},
|
|
"engines": {
|
|
"node": ">=18.0.0"
|
|
}
|
|
}
|