* security: bind device IDs and escape graph and device output
Device removal waits for graph cleanup inside a transaction before deleting the host row. Clone and template-sync ID lists go through db_in_clause, SNMP and ping strings are escaped at HTML sinks, and graph page size and column settings use bounded validators.
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* fix: skip cloned RRD task item remap when no matching data_template_rrd row exists
Guards the outer loop in api_clone_device_template() the same way the
inner loop already guards $new_graph_template_id: db_fetch_cell_prepared()
returns false when the cloned Data Template has no matching
data_template_rrd row, and binding that into task_item_id would corrupt
the cloned graph template's wiring instead of leaving it alone.
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* Number the CHANGELOG entry so the format check passes
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
---------
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
Co-authored-by: TheWitness <thewitness@cacti.net>
