centreon / centreon-archived

Centreon is a network, system and application monitoring tool. Centreon is the only AIOps Platform Providing Holistic Visibility to Complex IT Workflows from Cloud to Edge.
https://www.centreon.com
GNU General Public License v2.0
574 stars 240 forks source link

Fix(security): Sanitize queries in the list of trap groups #12022

Open emabassi-ext opened 2 years ago

emabassi-ext commented 2 years ago

Description

Fix XSS security vulnerabilities Fixes # MON-15375

Type of change

Target serie

How this pull request can be tested ?

  1. Configure LDAP authentication
  2. Click on “Import users” (Configuration > Users > contact / Users)
  3. Click on “Search”

You must still see results

Checklist

Community contributors & Centreon team

sonarqube-decoration[bot] commented 2 years ago

SonarQube Quality Gate

Quality Gate passed

Bug E 1 Bug
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell C 1 Code Smell

No Coverage information No Coverage information
0.0% 0.0% Duplication

kduret commented 2 years ago

migrated to https://github.com/centreon/centreon-gha/pull/138