mirror of
https://github.com/retspen/webvirtcloud
synced 2026-11-08 19:26:48 +00:00
4546653b5a
Several views returned json.dumps() output through HttpResponse, i.e. as text/html, and guess_mac_address reflects the URL's vname into it (reflected XSS). Templates filled the log table and volume dropdowns by concatenating server data into HTML strings, and log messages contain user-entered snapshot/disk/clone names (stored XSS that runs when a superuser opens the Logs tab). - Use JsonResponse in guess_mac_address, random_mac_address, guess_clone_name, sshkeys, storages.get_volumes, datasource.os_metadata_json and logs.vm_logs; sshkeys?plain=true is served as text/plain. - stats_tab.html builds log rows with .text(); instance.html and create_instance_w2.html build <option> elements with .val().text(). |
||
|---|---|---|
| .. | ||
| instances | ||
| add_instance_network_block.html | ||
| add_instance_owner_block.html | ||
| add_instance_volume.html | ||
| allinstances.html | ||
| allinstances_index_grouped.html | ||
| allinstances_index_nongrouped.html | ||
| bottom_bar.html | ||
| create_flav_block.html | ||
| create_inst_block.html | ||
| create_instance_w1.html | ||
| create_instance_w2.html | ||
| instance.html | ||
| instance_actions.html | ||