catborise
4546653b5a
fix: serve JSON endpoints as application/json and build DOM safely
...
Several views returned json.dumps() output through HttpResponse, i.e. as
text/html, and guess_mac_address reflects the URL's vname into it
(reflected XSS). Templates filled the log table and volume dropdowns by
concatenating server data into HTML strings, and log messages contain
user-entered snapshot/disk/clone names (stored XSS that runs when a
superuser opens the Logs tab).
- Use JsonResponse in guess_mac_address, random_mac_address,
guess_clone_name, sshkeys, storages.get_volumes,
datasource.os_metadata_json and logs.vm_logs; sshkeys?plain=true is
served as text/plain.
- stats_tab.html builds log rows with .text(); instance.html and
create_instance_w2.html build <option> elements with .val().text().
2026-10-02 18:29:11 +03:00
catborise
60565b05b3
fix(tests): decouple tests from local libvirt, support configurable test host, and fix URL/logging bugs
2026-09-25 11:51:45 +03:00
Emre Serdengeçti
1cbdf76df6
logger updates ( #31 )
...
* Log for failed login attempts
* Logger configuration for logging to file
* interface fixes
* login log fix, added logged in too
* bootstrap icons setup
* font-awesome icons replaced with bootstrap icons
* replaced i-tags with django_bootstrap_icons
* removed icons library from project
* bug fix
---------
Co-authored-by: catborise <catborise@gmail.com>
2023-08-09 09:20:18 +03:00
catborise
610efd5520
add host name for logs beside others
2021-05-31 11:39:09 +03:00
catborise
508e3609be
lint with black python. convert f style strings to old one. some small fixes
2020-11-05 12:34:31 +03:00
catborise
e46bb99b3b
fix typos and rearrange imports & add new lines EOF
2020-06-04 15:22:55 +03:00
catborise
7538ddab4f
Add all settings to appsettings page & Convert settings choices
2020-06-04 12:32:00 +03:00
Real-Gecko
27f62dff6c
Added admin application
...
- Manage users
- Manage groups
- Manage logs
2020-05-27 18:24:06 +06:00
Real-Gecko
38befa4362
Added django-login-required-middleware
...
Thus eliminating need for login_requred decorator on every view
2020-05-27 12:43:29 +06:00
catborise
a6f7618854
convert django.core.urlresolver to django.urls. fix i18n. fix identation
2020-01-24 10:09:46 +03:00
catborise
828a271789
pep8 style code corrections
2019-09-10 09:48:31 +03:00
Ing. Jan KRCMAR
839b8d420d
instance view: added logs section to graphs (renamed graphs -> stats)
2017-12-11 15:07:01 +01:00
Jan Krcmar
6afcd00e2e
logs view adds paging ability
...
settings.LOGS_PER_PAGE controls logs count per page
2016-03-23 10:38:33 +01:00
Retspen
1d22771519
Fixed #7
2015-05-18 22:00:30 +03:00
Retspen
b4e8da8671
Resoved problem with app template
2015-04-02 16:20:46 +03:00
Retspen
ea41412aac
Move tempates
2015-04-02 11:48:40 +03:00
Retspen
1642100ef4
Added log func and fix buttons on instance page
2015-03-18 15:48:29 +02:00
Retspen
90d8dd5729
Think about new macbook
2015-03-16 16:51:51 +02:00
Retspen
5ba82e29aa
Little fix user page
2015-03-16 15:46:44 +02:00
Retspen
5960e94da5
Add logs and block for templates
2015-03-03 11:34:09 +02:00
