Repository navigation

[5.0] Misc fix backport - #809

Merged

fstagni merged 16 commits into

DIRACGrid:rel-v5r0from

sfayer:fix_miscv5

Oct 26, 2026

Merged

[5.0] Misc fix backport#809
fstagni merged 16 commits into
DIRACGrid:rel-v5r0from
sfayer:fix_miscv5

Commits on Oct 25, 2026
- fix: replace HtmlEditor with plain TextEditor to avoid XSS injection
  
  chaen
  authored and
  sfayer
  committed
  44981c9
- fix: prevent command injection in ProxyUploadHandler
  
  fstagni
  authored and
  sfayer
  committed
  f08bd2b
- fix: require admin privileges for system administration actions
  
  fstagni
  authored and
  sfayer
  committed
  4d31f7d
- fix: sanitize welcome HTML to prevent stored XSS
  
  fstagni
  authored and
  sfayer
  committed
  09e279f
- fix: prevent path traversal in FileCatalogHandler
  
  fstagni
  authored and
  sfayer
  committed
  915444d
- fix: prevent XSS and open redirect in login flow
  
  fstagni
  authored and
  sfayer
  committed
  26ef1fb
- fix: use jwt.get_unverified_claims instead of disabling signature verification
  
  fstagni
  authored and
  sfayer
  committed
  7d53528
- fix: correct tooltip rendering for special characters in grid cells
  sfayer
  committed
  8a66956
- fix: render checkbox cell values correctly when they contain markup
  sfayer
  committed
  55a0d77
- fix: show literal text in job and pilot chart tooltips
  sfayer
  committed
  1d4888d
- fix: reject invalid filenames in job launchpad uploads
  sfayer
  committed
  dba437d
- fix: tighten archive filename check in file catalog download
  sfayer
  committed
  10c7ccd
- fix: validate sandbox type and correct download header encoding
  sfayer
  committed
  bce0e5a
- fix: handle unexpected path segments and existing directories in file catalog download
  sfayer
  committed
  1f4bed3
- fix: escape special characters in configuration diff display
  sfayer
  committed
  8e521d2
Commits on Oct 26, 2026
- fix: address pylint errors and apply pre-commit formatting
  fstagni
  committed
  c3b5e57

Commits

Commits on Oct 25, 2026

Commits on Oct 26, 2026