Feras Al-Kassar 35a6905092 Fix security vuls (#13554) ...

* Fix XSS vulnerabilities

* fix XSS vulnerabilities in alerts.inc.php

* fix XSS vulnerability in poller-groups.inc.php

* small fix for the integration

* another fix for the inegration

* another fix for the inegration

* change the sanitizer at sources instead of json_encode sinks

* another change sanitizer at sources instead of json_encode sinks

* another change sanitizer at sources instead of common_output and current_config sinks

* fix path manipulation vulnerability

2021-11-24 10:00:25 -06:00

..

add-dashboard.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

alert-details.inc.php

webui: Add button to show verbose alert details in the alert, alert-log webui (#12484)

2021-03-06 21:57:06 +01:00

alert-notes.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

alert-rules.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

alert-templates.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

alert-transports.inc.php

Push Notifications (Mobile and PC) (#13277)

2021-10-06 07:29:47 -05:00

application-update.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

callback-clear.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

callback-statistics.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

component.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

convert-template.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

create-alert-item.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

create-service.inc.php

webui - Services bootstrap enable + status (#12736)

2021-04-22 19:13:39 +02:00

customoid.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

delete-alert-rule.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

delete-alert-template.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

delete-alert-transport.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

delete-cluster-poller.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

delete-customoid.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

delete-dashboard.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

delete-host-dependency.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

delete-poller.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

delete-service.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

delete-transport-group.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

discovery-module-update.inc.php

Fixes for misc unset variables in polling (#13421)

2021-10-25 21:35:18 +02:00

edit-dashboard.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

get-host-dependencies.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

mempool-update.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

notifications.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

override-config.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

parse-alert-rule.inc.php

Apply fixes from StyleCI (#12124)

2020-09-21 15:59:34 +02:00

parse-alert-template.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

parse-customoid.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

parse-poller-groups.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

parse-service.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

poller-groups.inc.php

Fix security vuls (#13554)

2021-11-24 10:00:25 -06:00

poller-module-update.inc.php

Fixes for misc unset variables in polling (#13421)

2021-10-25 21:35:18 +02:00

processor-update.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

rediscover-device.inc.php

Fix security vuls (#13554)

2021-11-24 10:00:25 -06:00

refresh-oxidized-node.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

reload-oxidized-nodes-list.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

reset-port-state.inc.php

Fix security vuls (#13554)

2021-11-24 10:00:25 -06:00

routing-update.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

save-host-dependency.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

schedule-maintenance.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

search-oxidized-config.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

sensor-alert-reset.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

sensor-alert-update.inc.php

Fix security vuls (#13554)

2021-11-24 10:00:25 -06:00

sensor-update.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

show-alert-transport.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

show-transport-group.inc.php

Apply fixes from StyleCI (#12124)

2020-09-21 15:59:34 +02:00

sql-from-alert-collection.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

sql-from-alert-rules.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

storage-update.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

token-item-create.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

token-item-disable.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

token-item-remove.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

transport-groups.inc.php

Apply fixes from StyleCI (#13224)

2021-09-10 20:09:53 +02:00

update-alert-rule.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

update-dashboard-config.inc.php

remove legacy json format function (#12583)

2021-03-04 14:55:41 +01:00

update-ifalias.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

update-ifspeed.inc.php

Show port speed on port graphs, optionally set scale (#11858)

2021-08-23 06:47:44 -05:00

update-port-notes.inc.php

Remove legacy function calls (#12651)

2021-03-29 00:25:30 +02:00

update-ports.inc.php

Define Port Groups (#12402)

2021-04-06 17:25:08 -05:00

wireless-sensor-alert-reset.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

wireless-sensor-alert-update.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00

wireless-sensor-update.inc.php

Apply fixes from StyleCI (#12120)

2020-09-21 15:40:17 +02:00