catborise f19c30840e fix(console): prevent DOM-based XSS in console views and escape JS strings ... - Validate and coerce console query parameters (view_only, scale, resize_session, clip_viewport) to strict booleans via to_bool in console/views.py - Sanitize view parameter to strictly 'lite' or 'full' - Apply escapejs filter to all JS string interpolations in console-vnc-full.html, console-vnc-lite.html, console-spice-lite.html, and console-xterm.html - Replace unsafe '| safe' filter in console-spice-lite.html with escapejs - Add unit tests for XSS query param mitigation and escapejs character encoding		2026-09-26 19:28:22 +03:00
..
migrations	Add app	2015-02-27 14:25:41 +02:00
templates	fix(console): prevent DOM-based XSS in console views and escape JS strings	2026-09-26 19:28:22 +03:00
__init__.py	Add app	2015-02-27 14:25:41 +02:00
models.py	Add app	2015-02-27 14:25:41 +02:00
novncd	feat(console): add comprehensive test suite and expand send keys menu	2026-09-26 12:10:35 +03:00
socketiod	refactor(console): replace deprecated optparse with argparse and fix regex escape sequences	2026-09-24 22:08:08 +03:00
sshtunnels.py	format python code with black	2022-11-02 08:54:35 +03:00
test_cli_parsers.py	refactor(console): replace deprecated optparse with argparse and fix regex escape sequences	2026-09-24 22:08:08 +03:00
tests.py	fix(console): prevent DOM-based XSS in console views and escape JS strings	2026-09-26 19:28:22 +03:00
views.py	fix(console): prevent DOM-based XSS in console views and escape JS strings	2026-09-26 19:28:22 +03:00