Dirk Brenken fdc8eb01d0 luci-app-lxc: fix authenticated path traversal and ACL bypass (host root) ...

* ucode fixes:
  - tighten `is_valid_lxc_name` regex to `^[A-Za-z0-9_][A-Za-z0-9_-]{0,63}$`
  - apply the validator in `lxc_configuration_get` and `lxc_configuration_set` before any filesystem access
  - reject the `'lxc error: …'` sentinel string returned by `lxc_get_config_path()` on failure,
    rather than concatenating it into a path.
  - shellquote `LXC_URL` in `lxc_get_downloadable` and `lxc_create`
* ACL fix: add `depends.acl = ["luci-app-lxc"]` to each of the five backend entries,
   so the routes share the same authorization gate as the view

Signed-off-by: Dirk Brenken <dev@brenken.org>

2026-05-27 14:21:12 +03:00

..

luci-app-acl

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-acme

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-adblock

luci-app-adblock: update 4.5.5-6

2026-05-26 17:20:55 +02:00

luci-app-adblock-fast

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-adguardhome

luci-app-adguardhome: add new app

2026-03-16 21:00:18 +01:00

luci-app-advanced-reboot

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-antiblock

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-apinger

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-aria2

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-attendedsysupgrade

luci-app-attendedsysupgrade: rewrite README.md

2026-05-27 14:01:28 +03:00

luci-app-babeld

Translated using Weblate (Ukrainian)

2026-05-12 07:45:26 +02:00

luci-app-banip

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-bcp38

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-bmx7

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-chrony

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-clamav

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-cloudflared

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-commands

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-coovachilli

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-crowdsec-firewall-bouncer

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-csshnpd

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-dawn

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-dcwapd

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-ddns

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-dockerman

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-dump1090

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-email

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-eoip

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-example

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-filebrowser

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-filemanager

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-firewall

luci-app-firewall: keep enabled on cloning

2026-05-25 11:35:28 +03:00

luci-app-frpc

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-frps

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-fwknopd

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-hd-idle

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-https-dns-proxy

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-irqbalance

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-keepalived

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-ksmbd

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-ledtrig-rssi

…

luci-app-ledtrig-switch

…

luci-app-ledtrig-usbport

…

luci-app-libreswan

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-lldpd

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-lorawan-basicstation

…

luci-app-lxc

luci-app-lxc: fix authenticated path traversal and ACL bypass (host root)

2026-05-27 14:21:12 +03:00

luci-app-minidlna

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-mosquitto

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-mwan3

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-natmap

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-nextdns

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-nlbwmon

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-nut

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-ocserv

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-olsr

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-olsr-services

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-olsr-viz

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-omcproxy

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-openlist

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-openwisp

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-p910nd

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-package-manager

luci-app-package-manager: handle versioned provides from apk query

2026-05-25 11:48:47 +03:00

luci-app-pagekitec

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-pbr

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-privoxy

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-qos

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-radicale3

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-rp-pppoe-server

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-rustdesk-server

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-samba4

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-ser2net

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-smartdns

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-snmpd

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-softether

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-sqm

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-squid

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-sshtunnel

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-statistics

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-strongswan-swanctl

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-tailscale-community

luci-app-tailscale-community: update and fix dep

2026-05-05 13:42:55 +03:00

luci-app-tinyproxy

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-tor

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-transmission

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-travelmate

Translated using Weblate (Czech)

2026-05-23 09:52:34 +03:00

luci-app-ttyd

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-udpxy

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-uhttpd

luci-app-uhttpd: i18n context for x509 regional info

2026-05-22 13:40:12 +03:00

luci-app-unbound

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-upnp

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-usteer

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-ustreamer

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-v2raya

Translated using Weblate (Portuguese (Brazil))

2026-05-17 19:44:43 +03:00

luci-app-vnstat2

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00

luci-app-watchcat

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-wifihistory

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-wifischedule

Translated using Weblate (Ukrainian)

2026-05-12 12:12:31 +03:00

luci-app-wol

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-xfrpc

Translated using Weblate (Ukrainian)

2026-05-21 08:06:26 +03:00

luci-app-xinetd

Translated using Weblate (Portuguese)

2026-05-15 13:49:20 +03:00