4 commits

Author	SHA1	Message	Date
catborise	f19c30840e	fix(console): prevent DOM-based XSS in console views and escape JS strings ... - Validate and coerce console query parameters (view_only, scale, resize_session, clip_viewport) to strict booleans via to_bool in console/views.py - Sanitize view parameter to strictly 'lite' or 'full' - Apply escapejs filter to all JS string interpolations in console-vnc-full.html, console-vnc-lite.html, console-spice-lite.html, and console-xterm.html - Replace unsafe '| safe' filter in console-spice-lite.html with escapejs - Add unit tests for XSS query param mitigation and escapejs character encoding	2026-09-26 19:28:22 +03:00
catborise	591429b0c9	feat(console): add comprehensive test suite and expand send keys menu ... - Add 23 unit and integration tests covering console views, authorization, URL/path normalization, and novncd daemon token extraction - Refactor console/novncd arg parsing into __main__ block for clean test imports - Expand Send Key(s) menu into categorized sections (System, Navigation/Desktop, Terminal Control, Virtual Consoles) - Implement non-destructive LIFO sendKeyCombo using public rfb.sendKey API, eliminating vendor debt - Wire Send Key actions across Lite, Full, and PTY (xterm) console templates - Add modern navigator.keyboard.lock support during fullscreen sessions	2026-09-26 12:10:35 +03:00
catborise	0680f02240	remove css urls, add missing socketio requirements, fix cookie import, and rearrange socketiod connetion	2022-07-21 13:31:37 +03:00
Gaëtan Ferez	65dce10ce1	Implement Libvirt Serial Console as Console on WebVirtCloud	2022-07-17 13:25:47 +02:00