* Vulnerability report: Lack of escaping on some pages can lead
to XSS exposure
* Also cleaning up additional copyrights
* Make the way filter headers are escaped consistent
* Fixed: #2964 to add missed argv for all rrd_function_graph caller
* Fixed#2964: Apply security solution to aggregate graph preview and graph impage page
* CVE-2019-16723 Security issue allows to view all graphs
* Thischange restores the check inside of lib/rrr.php and updates all but on calling of the graph function to include the user.
* Fix CHANGELOG (#2533)
* Update Travis information
* Resolving issue #2532
Ensure Graph ListView table is displayed in line with Management -> Graphs
* Add missing lib/graphs.php
* Improve performance on graph_view's tree_content action by reducing the number of SQL queries executed
* Resolving issues 2538,2539,2540
This commit is related to features requests 2538,2539,2540 :
2538 : new setting to change datasource behaviour when deleting graph
2539 : new setting to add permanent unlock of graphs
2540 : new setting to forget graph tree history on tab close
* tree_history description
changed description for tree_history
* Minor Cacti PSR Update
* Minor Cacti PSR Change
* Minor Cacti PSR Change
* Relocate setting and change gramar
* Minor language change
* Minor format change
This is a major bug fix to Aggregate. Also found a bug in rrdtool that
we will have to work around.
The upside of the bug fix for #2365 is that it appears to have fixed
#599 and also an issue with legend alignment. Legends should always
align nicely now.
- Graphs included in aggregate that are removed are not managed properly
- The associate and disassociate functions were not following proper API
rules, they were leveraging request variables and redirecting using
header().
- Aggregate was not properly handling nth percentile. It's now handling
that correctly, though still has an issue with the actual value. This
will be fixed separately.
- Adding new convert to stacked line options for graph readability
- Totalling when using Print showing legend items was also showing graph
items, which is not correct.
- When totalling, Aggregate was attempting to show a blank line, but due
to an SQL format error, no blank line was displayed.
- Typo in one aggregate function was not properly handling the GPRINT
MIN graph item type
- Resolving issue 3) of the issues as best as can be done.
-Additionally, making the graph_template_id multiselect common for all
pages and resolving additional QA issues in all areas that were impacted
by multiselect issues.
- Lastly, resolving issues in Reports that cause excessive queries and a
bad user experience.
- There will be likely one more commit on this bug as more QA needs to
be performend on Data Source orphan API introduced.
* Resolving issue #1689
As noted in issue #1689 (Technical Support's RRDTool version should show
detected RRD version) the version of the RRDTool is never actually displayed.
The code has now been updated to properly handle versioning and displays both
the configured and installed versions.
The setting for rrdtool_version has been updated to a proper minimum version
number so that the cacti_version_compare() function may be effectively used.
This means that the constant values of RRDTOOL_VERSION_1_3 through
RRDTOOL_VERSION_7 have now been removed from the system.
* Some QA updates
* Further QA fixes
- Graph management shows bogus template names
- Additionally, allow Multi-selects to have a reasonable width
- For Non-Templated and Template Not Found, properly show those things
as select items in the filter.
cigamit