Block a user
Viewers can read global fleet settings, which the docs say are admin-only
Host credentials can rotate themselves without an admin request, locking out the real agent
Viewer requests trigger GitHub lookups and host log reads (plugin updates, chat)
Add Content-Security-Policy and HSTS headers
Login refuses a third concurrent password check and tells the user to wait 15 minutes
Operators can launch any Docker image cached on a host, not just admin-prepared runtimes
Request bodies have no size limit, so one operator request can exhaust controller memory
Installer exposes the enrollment token on the command line, and upgrade reruns leave it valid
Remove the unused launch-from-recipe path in DeployServerDialog
Provisioning job page is padded with empty rows and explanatory copy
Launch files card repeats its selection status four times and holds an unrelated launch action
Provisioning job page is padded with empty rows and explanatory copy
Reviewed 967b2a1c8a77ae055bb4a609669c9637ba2fdaa9. All three fix items are done, so I'm closing this.
Checklist
- Rows without a value hidden. "Finished" and "Submission attempted"…
Launch files card repeats its selection status four times and holds an unrelated launch action
Reviewed 15ab41d4a2a183496e89bf520158a1a490634a6d. Both fix items are done, so I'm closing this.
Checklist
- Selection status once. The card has a fixed "Launch files" heading and one…
Live event streams ignore backpressure
Reviewed deb2d21f29ed1f0f4721d09a704b5f84fff64272. The fix is done, so I'm closing this.
Checklist
- Backpressure checked before enqueuing. Both live streams now use one helper,…
Live event streams ignore backpressure
Provisioning job page header is crowded and phones show the basic facts last
Reviewed ff589afe5e6ad916cc2421311f41f2cf22e59e1f. This follow-up covers all three notes from my last review, so the issue stays closed.
Checklist
- Held recovery stays current.…
Unhandled rejection in status fanout timer can crash the controller
Failed first boot leaves background workers off until restart
Reviewed 0abe5ba8205378cc91a0ca8fd63a4982af35fefd. The fix is done, so I'm closing this.
Checklist
- Flag set only after startup succeeds.
bootedis now set at the end ofboot()…
Failed first boot leaves background workers off until restart
Unhandled rejection in status fanout timer can crash the controller
Reviewed 96d21d0514ccddccacbbf8619df01fb050f6e472. Both fix items are done, so I'm closing this.
Checklist
.catchat both call sites. The startup call and the interval callback…