mirror of
https://github.com/magicbug/Cloudlog
synced 2026-08-13 17:49:35 -04:00
fd49056a98
Add server-side read-only policy checks for plugins and surface security alerts to admins. Plugin_manager now validates plugin code (collects PHP files and scans for forbidden file/system/exec functions) during install and before enabling; installs are blocked or plugins auto-disabled on violation with a security alert returned. Plugins controller updated to use session validation for login, enforce admin (user_type 99) access, store/display security alerts via a flash session key, and pass a CSRF token to the view. The plugins index view now renders a warning banner for plugin security alerts. Documentation updated to link and include a new QSO Hooks plugin guide for third-party sync plugins. |
||
|---|---|---|
| .. | ||
| Adif_parser.php | ||
| AdifHelper.php | ||
| Cabrilloformat.php | ||
| Cloudlog_hooks.php | ||
| Clublog.php | ||
| Curl.php | ||
| DxccFlag.php | ||
| Electronicqsl.php | ||
| EqslImporter.php | ||
| Frequency.php | ||
| Hamqth.php | ||
| index.html | ||
| OptionsLib.php | ||
| Plugin_manager.php | ||
| Pota.php | ||
| Qra.php | ||
| Qrz.php | ||
| Sota.php | ||
| Subdivisions.php | ||
| Unzip.php | ||
| Wwff.php | ||