upstream/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2026-04-22 14:47:07 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
icinga2/lib/remote
History
Johannes Schmidt 2378b7e121 Remove TicketSalt in VariableQueryHandler as early as possible 
This is to avoid another kind of exploit found by where TicketSalt
can be accessed when the object filter is evaluated by checking
its name via the local `variable` reference and then `throw`ing
it to print it in the error message.

Reported-by: julian.brost@icinga.com
2025-10-02 15:51:42 +02:00
..
actionshandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
actionshandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
apiaction.cpp Remove unused ApiAction::Unregister() 2025-03-18 11:22:56 +01:00
apiaction.hpp Remove unused ApiAction::Unregister() 2025-03-18 11:22:56 +01:00
apifunction.cpp ApiFunction: store own name 2025-04-29 11:42:14 +02:00
apifunction.hpp ApiFunction: store own name 2025-04-29 11:42:14 +02:00
apilistener-authority.cpp ApiListener::UpdateObjectAuthority(): distribute auth. by object's host 2025-05-23 10:44:16 +02:00
apilistener-configsync.cpp Fix compiler warnings by not unnecessarily (copy-)constructing loop variables 2025-05-21 11:36:32 +02:00
apilistener-filesync.cpp Fix config sync after freezing namespaces 2023-02-01 12:29:47 +01:00
apilistener.cpp ApiListener#RelayMessageOne(): log to which Endpoint messages are relayed 2025-08-15 11:03:55 +02:00
apilistener.hpp Merge pull request #10516 from Icinga/http-handlers-stream-refactor 2025-08-29 11:33:34 +02:00
apilistener.ti Introduce DEFAULT_CONNECT_TIMEOUT 2021-07-27 21:57:02 +02:00
apiuser.cpp Fix file endings 2023-05-17 18:05:13 +02:00
apiuser.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
apiuser.ti Allow to create api user w/ password 2020-10-09 20:15:44 +02:00
CMakeLists.txt Add HttpRequest and HttpResponse classes 2025-08-28 13:22:15 +02:00
configfileshandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
configfileshandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
configobjectslock.cpp Introduce RAII style ObjectNameLock class 2024-06-13 11:26:19 +02:00
configobjectslock.hpp Introduce RAII style ObjectNameLock class 2024-06-13 11:26:19 +02:00
configobjectutility.cpp DependencyGraph: use ConfigObject*, not Object* 2024-12-17 18:33:05 +01:00
configobjectutility.hpp Just get paths from existing objects for modification and deletion 2022-11-28 16:39:16 +01:00
configpackageshandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
configpackageshandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
configpackageutility.cpp Use AtomicFile where applicable in ConfigPackageUtility 2025-07-24 10:54:39 +02:00
configpackageutility.hpp ConfigPackageUtility: Don't reset ongoing package updates on config validation success and process is going to be reloaded 2022-03-30 09:42:22 +02:00
configstageshandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
configstageshandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
consolehandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
consolehandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
createobjecthandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
createobjecthandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
deleteobjecthandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
deleteobjecthandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
endpoint.cpp Merge pull request #10387 from Icinga/cnt-msg 2025-07-16 17:29:24 +02:00
endpoint.hpp Introduce Endpoint#messages_received_per_type 2025-04-29 11:42:14 +02:00
endpoint.ti Introduce Endpoint#messages_received_per_type 2025-04-29 11:42:14 +02:00
eventqueue.cpp Fix compiler warnings by not unnecessarily (copy-)constructing loop variables 2025-05-21 11:36:32 +02:00
eventqueue.hpp Remove unused EventQueue::Unregister() 2025-03-18 11:22:56 +01:00
eventshandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
eventshandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
filterutility.cpp Add permission checking to script frames and filter utilities 2025-10-02 15:51:38 +02:00
filterutility.hpp Add permission checking to script frames and filter utilities 2025-10-02 15:51:38 +02:00
httphandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
httphandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
httpmessage.cpp Add HttpRequest and HttpResponse classes 2025-08-28 13:22:15 +02:00
httpmessage.hpp Add HttpRequest and HttpResponse classes 2025-08-28 13:22:15 +02:00
httpserverconnection.cpp HttpServerConnection: use std::chrono for m_Seen 2025-09-12 13:40:36 +02:00
httpserverconnection.hpp HttpServerConnection: use std::chrono for m_Seen 2025-09-12 13:40:36 +02:00
httputility.cpp Use new HTTP message classes in HttpServerConnection and Handlers 2025-08-28 13:22:18 +02:00
httputility.hpp Use new HTTP message classes in HttpServerConnection and Handlers 2025-08-28 13:22:18 +02:00
i2-remote.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
infohandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
infohandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
jsonrpc.cpp Fix compiler warnings don't move local variables 2022-02-22 17:51:43 +01:00
jsonrpc.hpp Replace std::shared_ptr<AsioTlsStream> with Shared<AsioTlsStream>::Ptr 2019-10-21 16:12:35 +02:00
jsonrpcconnection-heartbeat.cpp Fix file endings 2023-05-17 18:05:13 +02:00
jsonrpcconnection-pki.cpp Don't abruptly close anonymous connections 2025-01-30 17:45:27 +01:00
jsonrpcconnection.cpp Merge pull request #10387 from Icinga/cnt-msg 2025-07-16 17:29:24 +02:00
jsonrpcconnection.hpp Disconnect JSON-RPC clients on ApiListner::Stop() 2025-06-13 14:48:15 +02:00
mallocinfohandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
mallocinfohandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
messageorigin.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
messageorigin.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
modifyobjecthandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
modifyobjecthandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
objectqueryhandler.cpp Refactor ObjectQueryHandler to use new JSON stream encoder 2025-08-28 13:22:18 +02:00
objectqueryhandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
pkiutility.cpp Fix file endings 2023-05-17 18:05:13 +02:00
pkiutility.hpp CLI: Allow to list removed CSRs with 'ca list' 2019-06-07 10:33:55 +02:00
statushandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
statushandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
templatequeryhandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
templatequeryhandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
typequeryhandler.cpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
typequeryhandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
url-characters.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
url.cpp Fix compiler warnings by (copy-)constructing loop variables explicitly 2025-04-22 13:55:49 +02:00
url.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
variablequeryhandler.cpp Remove TicketSalt in VariableQueryHandler as early as possible 2025-10-02 15:51:42 +02:00
variablequeryhandler.hpp Remove extra parameters from HTTP handler signature 2025-08-28 13:22:18 +02:00
zone.cpp Merge pull request #10389 from Icinga/zone-endpoint-order 2025-08-22 10:11:51 +02:00
zone.hpp Merge pull request #10389 from Icinga/zone-endpoint-order 2025-08-22 10:11:51 +02:00
zone.ti Don't allow to change object parent,host/service_name at runtime 2022-09-09 18:26:28 +02:00