1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 19:26:48 +00:00
webvirtcloud/console/templates
catborise f19c30840e fix(console): prevent DOM-based XSS in console views and escape JS strings
- Validate and coerce console query parameters (view_only, scale, resize_session, clip_viewport) to strict booleans via to_bool in console/views.py
- Sanitize view parameter to strictly 'lite' or 'full'
- Apply escapejs filter to all JS string interpolations in console-vnc-full.html, console-vnc-lite.html, console-spice-lite.html, and console-xterm.html
- Replace unsafe '| safe' filter in console-spice-lite.html with escapejs
- Add unit tests for XSS query param mitigation and escapejs character encoding
2026-09-26 19:28:22 +03:00
..
console-base.html feat(console): add comprehensive test suite and expand send keys menu 2026-09-26 12:10:35 +03:00
console-spice-full.html fix(console): fix novncd startup in container and prevent double slashes in websocket url 2026-09-25 23:11:52 +03:00
console-spice-lite.html fix(console): prevent DOM-based XSS in console views and escape JS strings 2026-09-26 19:28:22 +03:00
console-vnc-full.html fix(console): prevent DOM-based XSS in console views and escape JS strings 2026-09-26 19:28:22 +03:00
console-vnc-lite.html fix(console): prevent DOM-based XSS in console views and escape JS strings 2026-09-26 19:28:22 +03:00
console-xterm.html fix(console): prevent DOM-based XSS in console views and escape JS strings 2026-09-26 19:28:22 +03:00