catborise 32d7f279e7 test: inventory HTML sinks in templates, realistic datasource params in the matrix ... - instances/test_xss.py: scan all templates for .html(, innerHTML = and append('<...') and require each line to be in a reviewed allowlist, so new sinks fail the test (the exact-string tests only caught the lines they named). - Authorization matrix: fill the datasource "version" parameter with "latest" instead of "x". The datasource views then answer 200 to any logged-in user; they are listed in the allowlist as known F-14.		2026-10-03 00:00:27 +03:00
..
api	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
fixtures	Instances overhaul	2020-07-13 15:33:09 +06:00
migrations	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
templates	fix: serve compute JSON endpoints as application/json, build chipset list safely	2026-10-02 22:34:05 +03:00
templatetags	lint with black python. convert f style strings to old one. some small fixes	2020-11-05 12:34:31 +03:00
__init__.py	Fixe migrations for new deployments	2020-05-28 18:19:25 +06:00
apps.py	format python code with black	2022-11-02 08:54:35 +03:00
forms.py	Corrected untranslated items	2023-12-13 14:00:02 +08:00
models.py	fix(reconciliation): serialize compute sync and enforce UUID identity	2026-09-28 14:55:49 +03:00
test_clone_permission.py	fix(instances): do not refuse clones for volume-less disks or unusual names	2026-10-02 23:14:28 +03:00
test_console_rule.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
test_console_settings_access.py	fix(instances): show console settings and the VNC password only to console managers	2026-10-02 22:04:05 +03:00
test_create_instance.py	fix(instances): guard mutations and refresh lists after sync	2026-09-28 14:56:19 +03:00
test_disk_isolation.py	fix(instances): allow editing disks that have no driver format	2026-10-02 23:58:55 +03:00
test_gstfsd.py	fix(gstfsd): random password salt, timeouts, loopback-only daemon	2026-10-02 22:52:09 +03:00
test_index.py	fix(instances): guard mutations and refresh lists after sync	2026-09-28 14:56:19 +03:00
test_root_pass.py	fix(gstfsd): random password salt, timeouts, loopback-only daemon	2026-10-02 22:52:09 +03:00
test_security_mutations.py	fix(instances): restrict disk views to superusers and validate disk input	2026-10-02 17:11:12 +03:00
test_template_flag.py	fix(instances): only superusers and staff may change the template flag	2026-10-02 22:13:46 +03:00
test_xss.py	test: inventory HTML sinks in templates, realistic datasource params in the matrix	2026-10-03 00:00:27 +03:00
tests.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
urls.py	fix: add an authorization matrix test and close the endpoints it finds	2026-10-02 20:33:12 +03:00
utils.py	fix(instances): do not refuse clones for volume-less disks or unusual names	2026-10-02 23:14:28 +03:00
views.py	fix(instances): allow editing disks that have no driver format	2026-10-02 23:58:55 +03:00