catborise
f19c30840e
fix(console): prevent DOM-based XSS in console views and escape JS strings
...
- Validate and coerce console query parameters (view_only, scale, resize_session, clip_viewport) to strict booleans via to_bool in console/views.py
- Sanitize view parameter to strictly 'lite' or 'full'
- Apply escapejs filter to all JS string interpolations in console-vnc-full.html, console-vnc-lite.html, console-spice-lite.html, and console-xterm.html
- Replace unsafe '| safe' filter in console-spice-lite.html with escapejs
- Add unit tests for XSS query param mitigation and escapejs character encoding
2026-09-26 19:28:22 +03:00
catborise
5aa22ac042
Django 3.2.4 LTS upgrade
2021-06-15 13:28:47 +03:00
catborise
fb3ef6be98
fix sendctrlaltdel for spice console
2020-07-23 11:07:22 +03:00
catborise
44aa746f4b
make console password optional for users with permissions
2020-07-17 11:05:47 +03:00
catborise
0b86e34203
replace tunnel.py with sshtunnel.py some small fixes
2020-07-14 15:44:20 +03:00
catborise
c0f707854a
wsproxy patch
2020-06-26 16:31:41 +03:00
catborise
1320753d6c
spice console password fix & translate additions
2020-06-26 10:06:51 +03:00
catborise
4f8a1fd50d
fix console password & sendkey & css fixes & add scale vb
2020-06-24 12:39:32 +03:00
catborise
e97d592e51
fix some messages, add translation for some keywords, update tr locale file
2020-06-12 14:46:17 +03:00
catborise
0e5840498e
bootstrap 4.5 & Bootswatch Themes
2020-06-04 11:33:25 +03:00
catborise
4d40de1b55
Python3 & Django 2.2 Migration - Fix & Updates
2020-03-16 16:59:45 +03:00
catborise
34394c2b5e
console layout rearranged. fix indentation. add translate tags
2020-01-23 15:45:41 +03:00
catborise
e80bbfd85b
console/templates/console-base.html fix html tag console/templates/console-spice-lite.html add console log message by @honza801
2018-10-24 16:45:23 +03:00
catborise
76e6388ec5
novnc ES6 compatibility is not working. I reverse it. Spice/VNC sending ctrl+alt+fn functionality restored.
2018-08-27 15:30:50 +03:00
catborise
2a5a761f05
spice config corrections
2018-08-14 16:49:25 +03:00
catborise
e7d649636c
spice problem correction
2018-08-14 15:37:26 +03:00
catborise
edb59947af
novnc is updated to 1.0.0 and add console views: lite,full option
2018-08-14 15:11:49 +03:00
