Branch: refs/heads/2.0.0
Home:
https://github.com/tribe29/checkmk
Commit: b28f77a05c062dd3b70aa8f26231a87d62a376c1
https://github.com/tribe29/checkmk/commit/b28f77a05c062dd3b70aa8f26231a87d6…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2022-01-10 (Mon, 10 Jan 2022)
Changed paths:
A .werks/13195
M cmk/gui/plugins/sidebar/bookmarks.py
M cmk/gui/utils/__init__.py
M cmk/gui/valuespec.py
M cmk/utils/regex.py
M tests/unit/cmk/gui/test_htmllib_input_vars.py
M tests/unit/cmk/gui/test_http.py
M tests/unit/cmk/gui/test_index.py
M tests/unit/cmk/test_update_config.py
Log Message:
-----------
13195 SEC Add validation to Documentation URL
Previous to this Werk the URLs to Documentation were not validated (e.g. in the
rule creation dialog). This could have lead to malicious links, e.g. links
containing javascript. These links now will be validated. The URL schemes are
now restricted to "http" and "https".
CMK-9254
Change-Id: Ie5750a02b0ad62ebc51d63a176bbf55e033db5c1