mirror of
https://github.com/Cacti/cacti.git
synced 2026-10-23 03:27:02 +09:00
TheWitnessandci
9facd9b500
* security: batch 7 develop - consolidate remaining develop-only GHSA advisories (12 fixes + 8 regression confirmations) Fixes: f7jw (automation preview XSS), rp5g (db_column_exists LIKE), vx2m (automation pivot CASE WHEN), h5wg (plugin DDL identifiers), 929h (aggregate LIKE filter), mfw8 (add_graphs REGEXP), m49v (user_admin sort_column allowlist), mpfm (rrd error-image theme allowlist), m3fh (SNMPv3 control chars), cg45 (remember-me row revoke), xq26 (remember-me retention window), m67r (import xml_path containment). Confirmed already fixed on develop, pinned with regression tests: 4gph, 977w, mgcq, 5p79, cfhh, wfcf, pjq5, wp33. Excluded: 227p (1.2.x-only), mx5c (maintainer private branch). * security: address batch-7 review feedback (lexical-first xml_path containment, session-wide sort allowlist, connection-aware db_column_exists quoting, reject-not-normalize plugin DDL identifiers, behavior-based test names) * style: apply php-cs-fixer single-quote fix to api_automation pivot builders; add WSL dev-environment note to copilot instructions * fix phpstan string typing * test: refresh SQL interpolation baseline for db_column_exists db_qstr change (database.php 9->8) --------- Co-authored-by: ci <ci@local>
63 lines
1.7 KiB
JSON
63 lines
1.7 KiB
JSON
{
|
|
"automation_devices.php": 1,
|
|
"automation_snmp.php": 1,
|
|
"automation_templates.php": 1,
|
|
"cli/add_data_query.php": 4,
|
|
"cli/add_graph_template.php": 4,
|
|
"cli/add_tree.php": 3,
|
|
"cli/analyze_database.php": 2,
|
|
"cli/audit_database.php": 7,
|
|
"cli/convert_tables.php": 1,
|
|
"cli/fix_mediumint.php": 1,
|
|
"cli/repair_database.php": 1,
|
|
"cli/repair_graphs.php": 3,
|
|
"cli/repair_templates.php": 4,
|
|
"cli/rrdresize.php": 1,
|
|
"cli/structure_rra_paths.php": 2,
|
|
"cmd.php": 3,
|
|
"cmd_realtime.php": 2,
|
|
"data_sources.php": 3,
|
|
"data_templates.php": 1,
|
|
"graph_templates.php": 3,
|
|
"graphs.php": 3,
|
|
"host.php": 1,
|
|
"install/upgrades/1_2_17.php": 1,
|
|
"install/upgrades/1_3_0.php": 1,
|
|
"lib/aggregate.php": 5,
|
|
"lib/api_aggregate.php": 5,
|
|
"lib/api_automation.php": 9,
|
|
"lib/api_device.php": 21,
|
|
"lib/api_graph.php": 8,
|
|
"lib/auth.php": 2,
|
|
"lib/boost.php": 3,
|
|
"lib/data_query.php": 2,
|
|
"lib/database.php": 8,
|
|
"lib/dsstats.php": 2,
|
|
"lib/functions.php": 1,
|
|
"lib/html_form.php": 2,
|
|
"lib/html_reports.php": 4,
|
|
"lib/import.php": 2,
|
|
"lib/mib_cache.php": 1,
|
|
"lib/package.php": 1,
|
|
"lib/plugins.php": 1,
|
|
"lib/poller.php": 11,
|
|
"lib/rrdcheck.php": 1,
|
|
"lib/template.php": 5,
|
|
"lib/variables.php": 1,
|
|
"managers.php": 6,
|
|
"plugins.php": 2,
|
|
"poller.php": 1,
|
|
"poller_automation.php": 2,
|
|
"poller_boost.php": 5,
|
|
"poller_dsstats.php": 1,
|
|
"poller_recovery.php": 2,
|
|
"poller_spikekill.php": 1,
|
|
"rrdcleaner.php": 3,
|
|
"support.php": 3,
|
|
"tree.php": 3,
|
|
"user_admin.php": 3,
|
|
"user_group_admin.php": 1,
|
|
"user_log.php": 1,
|
|
"utilities.php": 3
|
|
}
|