Alfredo Cardigliano
669589fe20
Fix missing authorization check in edit_blacklist.lua REST endpoint
...
Any authenticated user, including unprivileged accounts, could modify
threat intelligence blacklist URLs, enable/disable status, and update
intervals via POST /lua/rest/v2/edit/system/edit_blacklist.lua. Add
the same isAdministrator() guard used by the sibling
edit/category/category.lua endpoint.
GHSA-ffg5-889g-f5q8
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-16 14:53:27 +02:00
Alfredo Cardigliano
9f42a12251
Add administrator checks
2026-07-16 10:31:23 +02:00
Matteo Biscosi
705c14a431
Revert "Removed vulnerability scan ( #10490 )"
...
This reverts commit 947019d8c7 .
2026-06-28 10:52:21 +00:00
Manuel Ceroni
947019d8c7
Removed vulnerability scan ( #10490 )
...
* Removed vulnerability scan
* Removed other vs_utils references
2026-06-25 16:33:55 +02:00
Alfredo Cardigliano
600d99f333
Add SRC/DST_SITE_ID to historical flows
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-20 18:58:06 +02:00
Matteo Biscosi
648d982369
Changed key from network cidr to network id
2026-05-19 08:31:23 +00:00
Matteo Biscosi
b653dc60c8
Updated network configuration and added site to it
2026-05-18 20:20:23 +00:00
Alfredo Cardigliano
fb521c1752
Rename labels to tags to avoid confusion as labels was too common. (note: tag filters are now flowfilters)
2026-05-12 11:43:07 +02:00
Alfredo Cardigliano
56e9225326
Add Allowed Host Pools for Users, configurable in the local user settings
2026-03-04 09:31:34 +00:00
Manuel Ceroni
eb51a63ff2
Improved labels page ( #10044 )
...
* Improved labels page
* Removed print
2026-02-11 16:48:29 +01:00
Luca Deri
389e832d1c
(C) update
2026-01-19 16:23:53 +01:00
Manuel Ceroni
10bab95b16
Implemented the GUI for the Labels page ( #9953 )
2026-01-16 15:16:40 +01:00
GabrieleDeri
85fa6d1b1a
Updated host pool pages to vuejs, missing policy page TODO ( #9469 )
...
* Updated host pool pages to vuejs, missing policy page TODO
* Removed print
2025-08-02 16:24:29 +02:00
Manuel Ceroni
cb59d90445
Fixed the reset user password check in the user API rest ( #8946 )
2025-02-07 15:39:20 +01:00
Nicolo Maio
2e1b64d760
Add Blacklist reset button ( #8359 )
2024-05-03 15:01:50 +02:00
Matteo Biscosi
0fecdee1e4
Reworked blacklists page
2024-04-11 12:48:59 -04:00
Matteo Biscosi
d27d94423f
Fixes categories not correctly saved
2024-03-01 11:40:50 -05:00
Matteo Biscosi
3f703ca062
Fixes possible crash on custom application editing
2024-01-30 15:08:29 +00:00
Luca Deri
55870e97b9
(C) Update
2024-01-12 11:44:18 +01:00
Matteo Biscosi
aec90f5ab1
Fixes various issue with application reloading
2024-01-08 10:10:45 +00:00
Matteo Biscosi
c631713696
Fixes major problems in VS page
2023-10-31 12:16:57 +00:00
Nicolo Maio
869981544b
Add update all periodicity scan button. ( #7744 )
2023-08-09 13:29:22 +02:00
Matteo Biscosi
219d57e362
Fixes ndpi application duplication ids
2023-07-13 14:52:15 +00:00
Matteo Biscosi
4b1ee9d278
Fixes custom category change not working and apply button disabled ( #7406 #7405 )
2023-04-17 10:26:57 +00:00
Matteo Biscosi
a8da92b578
Reworked application management page
2023-04-03 11:02:29 +00:00
Alfredo Cardigliano
7da1395b87
Reworking capabilities support
2023-01-09 18:46:40 +01:00
Luca Deri
f726b867c7
Updated (C)
2023-01-01 16:37:57 +01:00
Alfredo Cardigliano
fa28e64a6d
Restore edit category path
2022-06-27 12:54:11 +02:00
MatteoBiscosi
d8842f7d2d
Reformatted category list page and added category rename ( #4287 )
2022-04-11 12:50:07 +02:00
MatteoBiscosi
61f74ce0a1
Added ability to set historical flow permission to users ( #6330 )
2022-04-07 12:41:28 +02:00
Alfredo Cardigliano
ca846f4015
Remove Interface pool (we have the host pool only now)
2022-02-25 18:04:46 +01:00
Alfredo Cardigliano
fb384dead0
Remove local networks pool
2022-02-25 16:05:46 +01:00
Alfredo Cardigliano
c430a58a62
Remove active monitoring pools
2022-02-25 11:59:06 +01:00
Alfredo Cardigliano
fb8128e0d4
Remove device pool
2022-02-23 15:22:37 +01:00
Alfredo Cardigliano
a7b6107d71
Remove flow pool
2022-02-23 15:05:22 +01:00
Alfredo Cardigliano
5623b9c6f7
Remove system endpoint
2022-02-23 14:53:48 +01:00
Alfredo Cardigliano
c1ef1bb9f4
Remove host_pool pool
2022-02-23 12:40:20 +01:00
Alfredo Cardigliano
257ece18c0
Copyright update (Lua)
2022-01-03 09:42:33 +01:00
Simone Mainardi
cb48d6e005
Adds missing v2/ REST endpoints due to gitignore policy
2021-07-14 08:06:45 +02:00
Simone Mainardi
833fc3670b
Reworks version of alert exclusions
2021-07-12 17:37:51 +02:00
Simone Mainardi
b117e8a23a
Adds new REST API v2/
...
Addresses #5269
2021-07-08 09:57:46 +02:00