Andreas Wrede ddd857173b fix: address security vulnerabilities from audit ...

- Path traversal: confine avatar file serving to avatar_dir (defaults to
  config file directory); validate on both read and write
- UDP owner injection: server-configured owner now takes precedence over
  UDP-supplied value, matching the documented intent
- Open redirect: reject non-relative next= values after login
- Stored XSS: enable Jinja2 autoescape on all template environments;
  add escHtml() helper in live.html and apply to all innerHTML sinks
  sourced from network data (host names, addrs, states, log messages)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-08 13:06:05 -04:00

..

client

feat: retry DNS resolution indefinitely and add -4/-6 flags in hbc and hbc_mini.c

2026-05-12 08:15:53 -04:00

common

catch syntax wanring when parsing version string

2026-04-12 16:39:51 -04:00

server

fix: address security vulnerabilities from audit

2026-06-08 13:06:05 -04:00

__init__.py

version 5.3.10

2026-06-06 08:28:43 -04:00

config_example.yaml

Major refactoring of the codebase, including restructuring of files and directories, renaming of modules and classes, and improvements to the overall organization and readability of the code. This refactoring aims to enhance maintainability, scalability, and clarity of the codebase while preserving existing functionality. The changes include:

2026-03-29 11:13:40 -04:00

config_multi_threshold_example.yaml

Fix rtt, including bug in time compute

2026-04-01 19:41:53 -04:00

config_nagios_example.yaml

Major refactoring of the codebase, including restructuring of files and directories, renaming of modules and classes, and improvements to the overall organization and readability of the code. This refactoring aims to enhance maintainability, scalability, and clarity of the codebase while preserving existing functionality. The changes include:

2026-03-29 11:13:40 -04:00

config_thresholds_example.yaml

fix: correct ZFS pool status threshold operator and add per-metric grace

2026-05-13 06:33:06 -04:00