MeshCentral/views
Josiah Baldwin 04c96eb2ff
Fix/xss (#6403)
* Fixed filenames not being escaped when editing files

This allowed a possible XSS by naming a file in a particular way on your device.

* Fixed HTML generation in webserver not escaping most things from req.query

This would allow XSS through a very simple phishing attack

* Added HtmlEscape to Mobile default as well

* Added sanitization to SAML redirect and Twitter/Azure
2024-09-26 21:09:34 -07:00
..
agentinvite.handlebars show seperate macos mpkgs in web ui #6308 2024-08-06 15:33:49 +01:00
default-mobile.handlebars Fix/xss (#6403) 2024-09-26 21:09:34 -07:00
default.handlebars Fix/xss (#6403) 2024-09-26 21:09:34 -07:00
download2.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
download.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
error404-mobile.handlebars Version 0.9.67 2022-01-10 18:02:19 -08:00
error404.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
error4042.handlebars Improved 404 pages to support tight Content-Security-Policy HTTP headers. 2022-01-10 01:26:45 -08:00
invite.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
login2.handlebars display flash errors for external auths like saml or oidc on the login screen #6154 2024-06-11 20:06:19 +01:00
login-mobile.handlebars display flash errors for external auths like saml or oidc on the login screen #6154 2024-06-11 20:06:19 +01:00
login.handlebars display flash errors for external auths like saml or oidc on the login screen #6154 2024-06-11 20:06:19 +01:00
message2.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
message.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
messenger.handlebars fix webrtcconfig and allow stun servers #6309 2024-09-03 13:42:06 +01:00
mstsc.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
player.handlebars fix player text align 2023-10-24 11:10:47 +01:00
sharing-mobile.handlebars fix webrtc file upload maybe #6309 2024-09-03 14:46:25 +01:00
sharing.handlebars add new line break feature to file edit #6365 2024-09-08 20:11:06 +01:00
ssh.handlebars Fixed SSH with xterm.js (#4668) 2022-10-25 09:58:04 -07:00
terms-mobile.handlebars Agent core download and reverse proxy improvements. 2020-11-30 13:20:31 -08:00
terms.handlebars Added BREACH attack mittigation, #4084 2022-06-08 10:47:23 -07:00
xterm.handlebars fix writeUtf8 for ssh player 2023-09-20 19:40:58 +01:00