1 Commits
Author SHA1 Message Date
Thomas Vincent cb79286b18 Contain plugin archive writes and validate the repository URL (#7656)
* Contain plugin archive writes and validate the repository URL

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* Use the full Cacti copyright header and reject non-base repository URLs

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* Move the path containment helpers into lib/functions.php

They live in lib/functions.php on 1.2.x; keeping a separate module on develop
split the same helpers across two files. plugin_validate_repository_url() goes
to lib/plugins.php with its caller.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* ci: refresh the sink baseline for the containment guard

The archive guard shifts eleven sink line numbers in lib/plugins.php.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

* ci: drop the baseline refresh this branch did not need

The sink and hotspot gates compare on a line-agnostic signature, so pure line
drift never tripped them and refreshing only invites merge conflicts.

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>

---------

Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
2026-08-16 21:33:43 -04:00