[checkmk-commits] [tribe29/checkmk] 867b17: 12280 SEC Fix XSS on host / folder properties page

Branch: refs/heads/master Home: https://github.com/tribe29/checkmk Commit: 867b177a6568ff67d6d371dac199e8b07af98d10 https://github.com/tribe29/checkmk/commit/867b177a6568ff67d6d371dac199e8b07… Author: Lars Michelsen <lm(a)tribe29.com> Date: 2021-03-02 (Tue, 02 Mar 2021) Changed paths: A .werks/12280 M cmk/gui/plugins/wato/utils/__init__.py M cmk/gui/watolib/host_attributes.py Log Message: ----------- 12280 SEC Fix XSS on host / folder properties page A user with permissions to edit tag groups could trigger a stored XSS issue on the host and folder properties pages. This may lead to javascript code being executed in the browser of another user which is able to access the host and folder properties pages. Change-Id: I6b5ed2716b297e5e8be7d621754a3459bdb05265 Commit: b590dbeeee3a7be7cdc1771cd6af021e9b22ff2e https://github.com/tribe29/checkmk/commit/b590dbeeee3a7be7cdc1771cd6af021e9… Author: Lukas Lengler <lukas.lengler(a)tribe29.com> Date: 2021-03-02 (Tue, 02 Mar 2021) Changed paths: M cmk/gui/dashboard.py Log Message: ----------- Move Related > Customize Dashboard to new PageMenuEntry Change-Id: I33b248c71f1f1736ff1e7a9893591cf90128dc49 Compare: https://github.com/tribe29/checkmk/compare/ecb005ce16eb...b590dbeeee3a