catborise
b04f656d2b
ci: replace super-linter with ruff
...
Super-linter ran from the unpinned :latest image and, because of
branches-ignore: [master], never on pull requests to master. Ruff now
checks syntax errors and pyflakes rules (E9, F) on every push and PR.
Fixes the existing findings: unused imports and variables, an unused
duplicate import in instances/tests.py, and the star import in
accounts/views.py. settings-dev.py keeps its star import of the base
settings.
2026-10-04 01:08:11 +03:00
catborise
4546653b5a
fix: serve JSON endpoints as application/json and build DOM safely
...
Several views returned json.dumps() output through HttpResponse, i.e. as
text/html, and guess_mac_address reflects the URL's vname into it
(reflected XSS). Templates filled the log table and volume dropdowns by
concatenating server data into HTML strings, and log messages contain
user-entered snapshot/disk/clone names (stored XSS that runs when a
superuser opens the Logs tab).
- Use JsonResponse in guess_mac_address, random_mac_address,
guess_clone_name, sshkeys, storages.get_volumes,
datasource.os_metadata_json and logs.vm_logs; sshkeys?plain=true is
served as text/plain.
- stats_tab.html builds log rows with .text(); instance.html and
create_instance_w2.html build <option> elements with .val().text().
2026-10-02 18:29:11 +03:00
catborise
2441b21c0c
feat(storage): support resilient ISO uploads across connection types
2026-09-28 14:57:31 +03:00
catborise
5e240236c3
feat(security): harden storage uploads and vrtManager snapshot XML handling
2026-09-27 13:28:17 +03:00
hudeng
326579a6ea
feat: Add ISO file upload progress support.
2025-07-17 17:11:30 +08:00
catborise
a1eab70e2d
reorg imports and black format
2022-11-02 16:05:41 +03:00
catborise
217e106c8b
format python code with black
2022-11-02 08:54:35 +03:00
catborise
62d4cf88ba
fix upload iso method
2021-12-17 09:21:42 +03:00
catborise
c77e049e82
add rbd support for add new/existing vol. create from rbd based flavor
2021-12-16 11:03:03 +03:00
catborise
f690d1fa60
handle security concerns with file uploading
2021-12-06 08:42:50 +03:00
catborise
4d21a3184b
fix: please wait dialog.
2021-10-04 16:18:36 +03:00
catborise
508e3609be
lint with black python. convert f style strings to old one. some small fixes
2020-11-05 12:34:31 +03:00
Real-Gecko
01043ba8a8
Templates cleanup
2020-10-15 20:18:45 +06:00
Real-Gecko
1b3fd9d05e
replaced ugettext_lazy with gettext_lazy
2020-10-14 18:27:57 +06:00
Real-Gecko
47009d47ca
Instances overhaul
2020-07-13 15:33:09 +06:00
catborise
e97d592e51
fix some messages, add translation for some keywords, update tr locale file
2020-06-12 14:46:17 +03:00
catborise
e46bb99b3b
fix typos and rearrange imports & add new lines EOF
2020-06-04 15:22:55 +03:00
catborise
7538ddab4f
Add all settings to appsettings page & Convert settings choices
2020-06-04 12:32:00 +03:00
catborise
22cb8f702a
fix code conventions for pylint
2020-06-04 08:48:43 +03:00
Real-Gecko
27f62dff6c
Added admin application
...
- Manage users
- Manage groups
- Manage logs
2020-05-27 18:24:06 +06:00
Real-Gecko
38befa4362
Added django-login-required-middleware
...
Thus eliminating need for login_requred decorator on every view
2020-05-27 12:43:29 +06:00
catborise
4d40de1b55
Python3 & Django 2.2 Migration - Fix & Updates
2020-03-16 16:59:45 +03:00
catborise
1c9c717f67
fix indentation. fix imports and description.
2020-01-24 14:30:37 +03:00
catborise
3a925af3c2
fix connection undefined error while getting volumes
2019-12-13 16:38:21 +03:00
catborise
828a271789
pep8 style code corrections
2019-09-10 09:48:31 +03:00
catborise
3a15b49796
Fix image clone/add logs
2019-04-29 14:10:54 +03:00
catborise
2dc83f39a2
Check media before adding new/existing volume
2019-02-14 16:49:12 +03:00
catborise
fc3f04c244
Add pool refresh before getting list of volumes
2018-12-18 10:50:42 +03:00
catborise
91f01d884b
add get_volumes function to view. And Remove unused 'get' artifact.
2018-11-16 16:04:26 +03:00
catborise
03ffa3a295
move add new disk to instance disk tab. add existing disk option to attach disk. Small typo fixes
2018-10-24 12:04:05 +03:00
catborise
ba212971fa
success message converted to translate ready
2018-09-26 17:18:30 +03:00
catborise
f7d2d24d0b
message.success fix - (request was missing)
2018-09-26 16:19:32 +03:00
catborise
4126ad2591
Volumes list allocation info added. While creating image files it is recommended username and group name info. Storage.html does not show messages. messages section added
2018-07-25 09:35:35 +03:00
Jan Krcmar
dac974ddab
request.user.is_authenticated() substitued for @login_required decorator
...
settings.LOGIN_URL = /accounts/login
2015-12-22 15:09:02 +01:00
Retspen
e54fd13e9a
Fixed access without admins prermission
2015-06-24 09:54:46 +03:00
Retspen
b4e8da8671
Resoved problem with app template
2015-04-02 16:20:46 +03:00
Retspen
35da9ad193
Added 404 and fixed urls
2015-04-02 15:39:40 +03:00
Retspen
ea41412aac
Move tempates
2015-04-02 11:48:40 +03:00
Retspen
56f840c893
Fixed pep8
2015-03-27 17:12:15 +02:00
Retspen
ed2b28c25e
Add new forms and templates
2015-03-10 16:24:10 +02:00
Retspen
5960e94da5
Add logs and block for templates
2015-03-03 11:34:09 +02:00
Retspen
fa3df5bff3
Refactoring
2015-02-27 11:51:33 +02:00
Retspen
dd5f98cbe8
build new tree
2015-02-27 11:28:22 +02:00
