starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-26 00:01:37 +00:00

Files

T

History

Ruben Fiszel df451aa64f fix(api): don't follow symlinks when reading service log files

Defense in depth on top of the existing `..` path-traversal check in
the get_log_file handler: reject the request if the final path
component is a symlink, so a planted symlink in the logs directory
cannot be used to read arbitrary files.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-28 16:27:00 +00:00

..

fix(api): don't follow symlinks when reading service log files

2026-05-28 16:27:00 +00:00

banned_domains.txt

increase banned_domains list

2022-12-14 10:24:18 +01:00

build_openapi.sh

add scalar at openapi2.html

2024-04-08 01:42:43 +02:00

build.rs

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

Cargo.toml

refactor: move bedrock proxy handling to windmill-ai (#9309 )

2026-05-25 14:22:10 +00:00

openapi-deref.json

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-05-25 16:18:38 +00:00

openapi-deref.yaml

feat(service-accounts): allow choosing role at creation time (#9307 )

2026-05-25 16:18:38 +00:00

openapi.yaml

feat: warn when custom instance db is shared across workspaces (#9359 )

2026-05-28 13:57:22 +00:00

README.md

restructure the entire backend layout using workspaces (#815 )

2022-10-29 11:58:06 +02:00

README.md

Windmill API

The API server, exposing functionality to other components and the frontend

This crate exposes both a library as well as a binary target.