2 Commits

Author	SHA1	Message	Date
Diego Rodrigues de Sa e Souza	486f01710c	fix(security): don't trust loopback socket as local when behind reverse proxy (#4632) ... Integrated into release/v3.8.36 — port rebuilt clean, release-green	2026-06-23 21:58:52 -03:00
Hernan Javier Ardila Sanchez	fd26e601a2	fix(dashboard): use lightweight ping endpoint for MaintenanceBanner (fixes #3040) (#3043) ... Integrated into release/v3.8.8. Applied review fixes: moved the SELECT 1 into a pingDb() db helper (no raw SQL in route, Hard Rule #5) + the 503 catch no longer leaks err.message (Hard Rule #12). Thanks @herjarsa!	2026-06-01 14:30:17 -03:00