TheWitnessandTheWitness 3b3544db03 Add MySQL/MariaDB variable capability matrix to Database section (#8188) ...

* Add MySQL/MariaDB variable capability matrix to Database section

* Add changelog fragment for PR #8188

* Address review: correct version boundaries, escaping, valid values, focusable hint, unit tests

* Normalize server version suffixes and cache the capability matrix

* Add capability matrix strings to the translation template

* Treat an unknown (null/empty) server version as supported to avoid a TypeError

* Cover the capability helpers in the installer coverage suite

---------

Co-authored-by: TheWitness <copilot@users.noreply.github.com>

2026-10-05 20:16:01 -04:00

..

Core

Port #8166 SNMP credential cache + procedural SNMPv3 (with #8171/#8172 follow-ups) to develop (#8174)

2026-10-05 10:18:41 -04:00

Database

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

DataCollection

Port #8166 SNMP credential cache + procedural SNMPv3 (with #8171/#8172 follow-ups) to develop (#8174)

2026-10-05 10:18:41 -04:00

Domain/Installation

feat(installer): add installation domain foundation (#7291)

2026-08-22 19:05:50 -07:00

fixtures

fix: declare __() before the disabled-i18n fallback returns (#7751)

2026-08-17 23:52:43 -04:00

Installer

Harden installer cleanup and enforce coverage collection (#7993)

2026-09-05 18:38:09 -07:00

Plugin

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

Poller

Serialize process registry admission with portable locks (#7771)

2026-09-04 19:36:42 -07:00

Scripts

PHPStan Level 8 - Phase 1 Conversion (#8135)

2026-10-02 10:08:56 -04:00

Security

feature: user-defined filter layouts with administrator publishing (#8185)

2026-10-05 19:49:42 -04:00

Snmp

fix: detect a failed SNMP walk by exit code, not by device data (#7929)

2026-09-02 16:36:43 -07:00

Ui

Add MySQL/MariaDB variable capability matrix to Database section (#8188)

2026-10-05 20:16:01 -04:00

AggregateSequenceSqliTest.php

chore: normalize CRLF line endings to LF across Cacti-owned files (#8156)

2026-10-02 17:22:42 -04:00

ApiDenyByDefaultTest.php

Refuse to serve the REST scaffold unless it is switched on (#7716)

2026-08-21 12:30:21 -07:00

ApiDeviceCloneRrdRemapGuardTest.php

security: bind device IDs and escape graph and device output (#7732)

2026-08-16 20:21:07 -04:00

AuthBruteForceHardeningTest.php

feat(auth): rename User Domains to Login Providers, add SAML2 and OpenID Connect (#8066)

2026-09-24 17:51:18 -04:00

AuthFailureLogFormatTest.php

Add fail2ban support for authentication failures (#7676)

2026-08-31 17:02:27 -04:00

AuthLoginRedirectValidationTest.php

Validate the post-login referer redirect (#7680)

2026-08-16 20:20:20 -04:00

AuthLogoutRevocationTest.php

Revoke server-side auth tokens on logout (#7677)

2026-08-16 21:22:49 -04:00

AuthRehashScopeTest.php

feat(auth): rename User Domains to Login Providers, add SAML2 and OpenID Connect (#8066)

2026-09-24 17:51:18 -04:00

AutomationSqlIdentifierTest.php

Confine names used as SQL identifiers in automation (#7701)

2026-08-29 17:53:44 -07:00

CactiFilesystemTest.php

Add DI-friendly CactiFilesystem and adopt atomic CLI writes (#7189)

2026-08-29 17:52:26 -07:00

CactiFormTest.php

Add a Cacti-native form API and migrate the Site editor (#7368)

2026-08-22 19:06:10 -07:00

CactiMd5FileFinderTest.php

Use a maintained finder for recursive MD5 discovery (#7718)

2026-08-31 17:07:36 -04:00

ConsolidatedFunctionalFixesTest.php

Device Template Ordering Issues (#8035)

2026-09-18 00:13:05 -04:00

CspReportEndpointTest.php

security: stage nonce CSP migration and gated enforcement (#7662)

2026-08-16 21:38:46 -04:00

CsrfGetDeleteTest.php

fix(csrf): require POST tokens for state-changing actions (#7991)

2026-09-12 15:09:25 -04:00

DbLikeEscapeTest.php

security: escape LIKE wildcards in poller_automation and plugins.php filters (#7670)

2026-08-16 21:15:44 -04:00

DsstatsPollerOutputBatchingTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

DsstatsQueryEfficiencyTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

DsstatsStatisticsQueryTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

FunctionsSanitizeUriOffsetTest.php

Repair the string sanitisers in lib/functions.php (#7696)

2026-08-16 21:31:29 -04:00

GraphViewHostIdValidationTest.php

security: validate host_id before the graph_view filter WHERE clauses (GHSA-r7hc-hrpv-52gf) (#8100)

2026-09-29 10:25:12 -04:00

HeadersSecureTest.php

security: stage nonce CSP migration and gated enforcement (#7662)

2026-08-16 21:38:46 -04:00

HtmlGraphDeviceHardeningTest.php

security: bind device IDs and escape graph and device output (#7732)

2026-08-16 20:21:07 -04:00

I18nFallbackTranslateTest.php

fix(tests): restore paths and isolate test doubles (#7764)

2026-08-19 12:28:45 -07:00

ImportDataSourceItemValidationTest.php

security(import): validate Data Source item fields coming from Template XML (#7720)

2026-08-31 17:08:26 -04:00

IndexExternalLinkConfinementTest.php

Confine index.php external-link content includes (#7687)

2026-08-16 20:39:10 -04:00

InlineScriptDataEncodingTest.php

feat(rendering): add HTML, URL, and inline-data output helpers (#7252)

2026-08-22 17:15:06 -07:00

MibCacheSqlBindingTest.php

Bind the MIB column names in MibCache::select() (#7707)

2026-08-29 16:02:39 -07:00

PathContainmentTest.php

Contain plugin archive writes and validate the repository URL (#7656)

2026-08-16 21:33:43 -04:00

Php8ZeroDivisorGuardTest.php

Fix confirmed poller, database, automation, and UI defects (#7861)

2026-09-01 21:01:28 -07:00

Php85DeprecationCompatibilityTest.php

fix(php85): remove test and authenticator deprecations (#7632)

2026-08-29 17:38:51 -07:00

PluginArchiveContainmentTest.php

Contain plugin archive writes and validate the repository URL (#7656)

2026-08-16 21:33:43 -04:00

PluginsFilterLikeSqliTest.php

security: escape LIKE wildcards in poller_automation and plugins.php filters (#7670)

2026-08-16 21:15:44 -04:00

PollerZeroDivisorGuardTest.php

Guard two divisions PHP 8 made fatal (#7697)

2026-08-16 21:04:12 -04:00

RrdAtomicWriteTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdCheckPathTest.php

security: confine rrd data source paths to the RRA directory (#7665)

2026-08-31 17:00:25 -04:00

RrdControlCharTest.php

security: strip control characters from rrdtool command line (#7663)

2026-08-16 21:26:06 -04:00

RrdGraphItemFieldContractTest.php

Validate graph item fields before they reach the RRDtool command line (#7655)

2026-08-16 21:35:44 -04:00

RrdGraphQueryEfficiencyTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdGraphSubstitutionSafetyTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdInterfaceSpeedQueryTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdMutationTransactionTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdProcessSafetyTest.php

fix: relaunch RRDtool after a crash instead of failing the rest of the run (#7927)

2026-09-02 13:22:32 -07:00

RrdProxyProtocolTest.php

Build releases from managed dependencies (#7888)

2026-09-01 23:11:49 -07:00

RrdResolutionStepQueryTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

RrdtoolArgEscapeTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

SessionLookupIndexTest.php

Add indexes for host-template and session lookups (#7634)

2026-08-26 16:16:26 -07:00

ShellEscapingContractTest.php

Harden RRDtool execution and data handoff (#7615)

2026-08-31 16:49:44 -04:00

SnmpPortIntCastTest.php

Force the SNMP port to an integer before the net-snmp command line (#7689)

2026-08-15 14:03:13 -07:00

SsrfRemoteCollectorTest.php

security: block loopback/link-local SSRF targets in call_remote_data_collector (#7672)

2026-08-16 21:16:55 -04:00

TemplateColumnSqliTest.php

security: restrict graph input fields across handoffs (CVE-2024-31458) (#7669)

2026-08-30 10:56:16 -07:00

TreeNodeIdorTest.php

security: enforce tree access in api_tree node create/delete/rename (IDOR) (#7674)

2026-08-16 20:36:45 -04:00