[Midnightbsd-cvs] [MidnightBSD/mports] 91323f: magus: add input validation and referer checks to ...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/mports
  Commit: 91323f15e8cedc10e3550d48f623d9730cfe9b82
      https://github.com/MidnightBSD/mports/commit/91323f15e8cedc10e3550d48f623d9730cfe9b82
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-31 (Fri, 31 Jul 2026)

  Changed paths:
    M Tools/magus/www/data/magus/auth/edit.cgi
    M Tools/magus/www/data/magus/auth/reset_port.cgi

  Log Message:
  -----------
  magus: add input validation and referer checks to reset_port.cgi and edit.cgi

- Add numeric id validation for reset_port.cgi and edit.cgi
- Add class and attribute whitelisting for edit.cgi to prevent arbitrary class invocation
- Sanitize referer redirect target in both scripts to prevent open redirects

AI-Assisted-by: Gemini 3.6 Flash <noreply at google.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications