[checkmk-commits] [tribe29/checkmk] 71cb72: 11085 SEC Icon upload: Add missing transaction val...

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 71cb72b317a854557cc00054eccd992aae1deebf https://github.com/tribe29/checkmk/commit/71cb72b317a854557cc00054eccd992aa… Author: Lars Michelsen <lm(a)tribe29.com> Date: 2020-07-03 (Fri, 03 Jul 2020) Changed paths: A .werks/11085 M cmk/gui/wato/pages/icons.py Log Message: ----------- 11085 SEC Icon upload: Add missing transaction validation The transaction IDs (CSRF tokens) were not validated while processing the upload of icons. This alone is not a security hole, rather a lack of validation of this call. Change-Id: Ie014ca7f6714cdbdf58cadf4939c8bd0e4d909f8 Commit: 7326e110d920fb42df407a69f3dadc225f52571d https://github.com/tribe29/checkmk/commit/7326e110d920fb42df407a69f3dadc225… Author: Sven Panne <sven.panne(a)tribe29.com> Date: 2020-07-03 (Fri, 03 Jul 2020) Changed paths: M .pylintrc M checks/hp_proliant.include M checks/jolokia_jvm_memory Log Message: ----------- Enable comprehension-escape. Change-Id: I275cfd0989c627e1ef9723aef7f2139b3192d851 Commit: 5760d62bad5015d7a057899585cebbd1e06e2e00 https://github.com/tribe29/checkmk/commit/5760d62bad5015d7a057899585cebbd1e… Author: Moritz Kiemer <moritz.kiemer(a)tribe29.com> Date: 2020-07-03 (Fri, 03 Jul 2020) Changed paths: M cmk/base/discovery.py M tests-py3/unit/cmk/base/test_discovery.py Log Message: ----------- discovery: Pass service to service filter It makes sense, if you think about it. Change-Id: I3247ce67d35eff8a90e0aa215c1594368a1c7e69 Compare: https://github.com/tribe29/checkmk/compare/174377efba11...5760d62bad50