upstream/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2026-02-11 23:03:24 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
icinga2/lib/remote
History
Johannes Schmidt 4e37ed7142 Remove TicketSalt in VariableQueryHandler as early as possible 
This is to avoid another kind of exploit found by where TicketSalt
can be accessed when the object filter is evaluated by checking
its name via the local `variable` reference and then `throw`ing
it to print it in the error message.

Reported-by: julian.brost@icinga.com
2025-10-13 16:29:54 +02:00
..
actionshandler.cpp HTTP: Don't override status codes that are not OK 2021-01-13 18:56:56 +01:00
actionshandler.hpp AuthenticatedApiUser name refactor 2020-07-03 11:17:36 +02:00
apiaction.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
apiaction.hpp Clarify difference between API actions and functions in their docstrings 2020-11-12 14:23:41 +01:00
apifunction.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
apifunction.hpp Clarify difference between API actions and functions in their docstrings 2020-11-12 14:23:41 +01:00
apilistener-authority.cpp Unify Application::GetStartTime() and drop GetMainTime() 2020-02-11 17:26:15 +01:00
apilistener-configsync.cpp ApiListener: Process cluster config updates sequentially 2024-09-20 11:05:47 +02:00
apilistener-filesync.cpp Write also /var/lib/icinga2/api/zones-stage-startup-last-failed.log 2022-04-11 12:28:12 +02:00
apilistener.cpp ApiListener#Start(): auto-renew CA on its owner 2023-12-18 17:07:44 +01:00
apilistener.hpp ApiListener#Start(): auto-renew CA on its owner 2023-12-18 17:07:44 +01:00
apilistener.ti Introduce DEFAULT_CONNECT_TIMEOUT 2021-07-27 21:57:02 +02:00
apiuser.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
apiuser.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
apiuser.ti Allow to create api user w/ password 2020-10-09 20:15:44 +02:00
CMakeLists.txt On Windows, don't create C:\Program Files\Icinga2\var during MSI build 2025-01-16 12:07:44 +01:00
configfileshandler.cpp De-couple package and stage name validation 2021-08-02 15:40:14 +02:00
configfileshandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
configobjectslock.cpp Introduce RAII style ObjectNameLock class 2024-09-20 11:05:47 +02:00
configobjectslock.hpp Introduce RAII style ObjectNameLock class 2024-09-20 11:05:47 +02:00
configobjectutility.cpp ConfigObjectUtility#CreateObject(): Use Defer for config path cleanup 2024-09-20 11:06:26 +02:00
configobjectutility.hpp Fix message origin for runtime created config object (create/delete events) 2019-08-13 15:05:47 +02:00
configpackageshandler.cpp De-couple package and stage name validation 2021-08-02 15:40:14 +02:00
configpackageshandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
configpackageutility.cpp ConfigPackageUtility: Don't reset ongoing package updates on config validation success and process is going to be reloaded 2022-04-07 11:58:04 +02:00
configpackageutility.hpp ConfigPackageUtility: Don't reset ongoing package updates on config validation success and process is going to be reloaded 2022-04-07 11:58:04 +02:00
configstageshandler.cpp ConfigStagesHandler: Don't allow concurrent package updates anymore 2022-04-07 11:58:04 +02:00
configstageshandler.hpp ConfigStagesHandler: Don't allow concurrent package updates anymore 2022-04-07 11:58:04 +02:00
consolehandler.cpp Merge pull request #8601 from Icinga/feature/replace-std-boost-bind-with-lambdas-7006 2021-03-18 17:56:13 +01:00
consolehandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
createobjecthandler.cpp Don't allow to modify/create/delete an object concurrently 2024-09-20 11:08:08 +02:00
createobjecthandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
deleteobjecthandler.cpp Don't allow to modify/create/delete an object concurrently 2024-09-20 11:08:08 +02:00
deleteobjecthandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
endpoint.cpp Use std::mutex, not boost::mutex 2021-02-03 09:54:57 +01:00
endpoint.hpp Use std::mutex, not boost::mutex 2021-02-03 09:54:57 +01:00
endpoint.ti Introduce Endpoint#capabilities 2020-10-19 13:04:20 +02:00
eventqueue.cpp Use std::mutex, not boost::mutex 2021-02-03 09:54:57 +01:00
eventqueue.hpp Use std::mutex, not boost::mutex 2021-02-03 09:54:57 +01:00
eventshandler.cpp ApiEvents: Implement new API event streams response 2021-01-11 14:59:48 +01:00
eventshandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
filterutility.cpp Add permission checking to script frames and filter utilities 2025-10-13 16:29:54 +02:00
filterutility.hpp Add permission checking to script frames and filter utilities 2025-10-13 16:29:54 +02:00
httphandler.cpp Handle boost::beast::http::basic_fields#operator[]() signature change (v1.81) 2023-02-15 10:41:31 +01:00
httphandler.hpp Quality: Purge old HTTP code in lib/remote 2019-05-24 15:50:43 +02:00
httpserverconnection.cpp Handle boost::beast::http::basic_fields#operator[]() signature change (v1.81) 2023-02-15 10:41:31 +01:00
httpserverconnection.hpp Replace std::shared_ptr<AsioTlsStream> with Shared<AsioTlsStream>::Ptr 2019-10-21 16:12:35 +02:00
httputility.cpp Use content_length method for setting the Content-Length header 2020-12-22 16:27:38 +01:00
httputility.hpp Quality: Purge old HTTP code in lib/remote 2019-05-24 15:50:43 +02:00
i2-remote.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
infohandler.cpp Use content_length method for setting the Content-Length header 2020-12-22 16:27:38 +01:00
infohandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
jsonrpc.cpp Replace std::shared_ptr<AsioTlsStream> with Shared<AsioTlsStream>::Ptr 2019-10-21 16:12:35 +02:00
jsonrpc.hpp Replace std::shared_ptr<AsioTlsStream> with Shared<AsioTlsStream>::Ptr 2019-10-21 16:12:35 +02:00
jsonrpcconnection-heartbeat.cpp Remove all codes related to the heartbeat timeout 2020-07-29 14:27:55 +02:00
jsonrpcconnection-pki.cpp RequestCertificateHandler(): also renew if CA needs a renewal 2023-12-18 17:07:44 +01:00
jsonrpcconnection.cpp JsonRpcConnection: always log errors 2021-03-04 16:23:07 +01:00
jsonrpcconnection.hpp Replace std::shared_ptr<AsioTlsStream> with Shared<AsioTlsStream>::Ptr 2019-10-21 16:12:35 +02:00
messageorigin.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
messageorigin.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
modifyobjecthandler.cpp Don't allow to modify/create/delete an object concurrently 2024-09-20 11:08:08 +02:00
modifyobjecthandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
objectqueryhandler.cpp Evaluate permission filters also on all joined relations 2022-10-31 13:01:12 +01:00
objectqueryhandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
pkiutility.cpp Replace std/boost::bind() function with lambda expression 2021-03-10 16:29:40 +01:00
pkiutility.hpp CLI: Allow to list removed CSRs with 'ca list' 2019-06-07 10:33:55 +02:00
statushandler.cpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
statushandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
templatequeryhandler.cpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
templatequeryhandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
typequeryhandler.cpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
typequeryhandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
url-characters.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
url.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
url.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
variablequeryhandler.cpp Remove TicketSalt in VariableQueryHandler as early as possible 2025-10-13 16:29:54 +02:00
variablequeryhandler.hpp HttpServerConnection: encapsulate streaming start indicator 2019-04-02 17:37:29 +02:00
zone.cpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
zone.hpp Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00
zone.ti Replace Copyright header with a short version, part I 2019-02-25 14:48:22 +01:00