Security improvement batch (#6622)

* Adds a new method for the server to push notifies to the client, which require administration privileges from the user. If there are messages in queue but user is not privileged, she is notified of pending messages

* Fix unit tests

* Increase timeouts on tests

* Add translations

* * Aggregate admin messages
* Send admin message on auth fail
* Sending messages over bus
* XSS filtering of objects sent over the REST API

* Warn users if their instance is world readable

* Fix adminnotifies init()

* Fix couple issues from Codacy
This commit is contained in:
Sulka Haro
2021-01-07 22:46:55 +02:00
committed by GitHub
parent df6d9aadc3
commit 914ba78f36
34 changed files with 12059 additions and 117 deletions
+3
View File
@@ -302,6 +302,9 @@
</form>
</div>
<div id="adminNotifiesDrawer" class="drawer">
</div>
<div id="treatmentDrawer">
<form id="treatment-form">
<fieldset class="treatmentData">
+1
View File
@@ -23,6 +23,7 @@
<a id="drawerToggle" class="tip" original-title="Settings" aria-label="Settings" href="#"><i class="icon-menu"></i></a>
<a id="testAlarms" class="tip" original-title="Alarm Test / Smartphone Enable" aria-label="Alarm Test / Smartphone Enable" href="#"><i class="icon-volume"></i></a>
<a id="editbutton" class="tip" original-title="Edit Mode" aria-label="Edit Mode" href="#" style="display:none;"><i class="icon-edit"></i></a>
<a id="adminnotifies" class="tip" original-title="Admin ntofications" aria-label="Admin notifications" href="#" style="display:none;"><i class="plugicon-notifies"></i></a>
</div>
<% } %>
</div>