jokob-sk
a98bac331d
MERGE: resolve conflicts
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-10 10:11:34 +11:00
jokob-sk
9f6086e5cf
BE: better error message
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-10 09:27:13 +11:00
jokob-sk
6d70a8a71d
BE: /logs endpoint, comments resolution, github template
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-10 07:58:21 +11:00
Adam Outler
5b871865db
/data and /tmp standarization
2025-11-09 17:03:25 +00:00
jokob-sk
8483a741b4
BE: LangStrings /graphql + /logs endpoint, utils chores
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-09 18:50:16 +11:00
jokob-sk
5cf8a25bae
BE: timestamp work name changes #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-08 22:01:04 +11:00
jokob-sk
7822b11d51
BE: plugins changed data detection
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-08 14:15:45 +11:00
jokob-sk
cbe5a4a732
BE: version added to app_state
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-06 22:08:19 +11:00
jokob-sk
6374219e05
BE: github actions + dev version
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-06 20:47:28 +11:00
jokob-sk
85aa04c490
TEST: fix
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-06 08:14:00 +11:00
jokob-sk
1fd8d97d56
BE: chore datetime_utils
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-05 16:42:42 +11:00
jokob-sk
286d5555d2
BE: chore datetime_utils
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-05 16:14:03 +11:00
jokob-sk
57096a9258
FE: handling non-existent logs
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-05 16:13:28 +11:00
jokob-sk
c08eb1dbba
BE: chore datetime_utils
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-05 16:08:04 +11:00
jokob-sk
0845b7f445
BE: name resolution did not apply regex cleanup
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-05 15:25:53 +11:00
jokob-sk
5452b7287b
BE/PLG: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-04 19:52:19 +11:00
jokob-sk
80d7ef7f24
BE/PLG: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-04 19:46:50 +11:00
jokob-sk
dc4da5b4c9
BE/PLG: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-04 19:44:30 +11:00
jokob-sk
59477e7b38
BE/PLG: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-04 19:24:13 +11:00
Jokob @NetAlertX
6dd7251c84
BE/PLG: TZ timestamp work #1251
docker / docker_dev (push) Has been cancelled
2025-11-04 07:06:19 +00:00
jokob-sk
c52e44f90c
BE/PLG: TZ timestamp work #1251
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-04 08:10:50 +11:00
jokob-sk
288427c939
BE/PLG: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-03 10:19:39 +11:00
jokob-sk
4c92a941a8
BE: TZ timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-03 08:12:00 +11:00
Jokob @NetAlertX
031d810566
Merge branch next_release into main
Code checks / check-url-paths (push) Has been cancelled
Deploy MkDocs / deploy (push) Has been cancelled
2025-11-02 22:20:13 +11:00
jokob-sk
b806f84946
BE: invlaid return #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-02 22:16:28 +11:00
jokob-sk
7c90c2e93c
BE: spinner + timestamp work #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-02 22:12:30 +11:00
jokob-sk
a27ee5c2f2
BE: changes #1251
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-02 13:55:51 +11:00
jokob-sk
c3c570ef5f
BE: added stateUpdated #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-02 13:51:17 +11:00
jokob-sk
2215272e78
BE: short-circuit of name resolution #1251
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-02 11:57:08 +11:00
jokob-sk
e7ed9e0896
BE: logging fix and comments why eve_PendingAlertEmail not cleared
...
Code checks / check-url-paths (push) Has been cancelled
Deploy MkDocs / deploy (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-11-01 17:58:22 +11:00
jokob-sk
537be0f848
BE: typos
...
docker / docker_dev (push) Has been cancelled
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-31 22:01:16 +11:00
jokob-sk
533c99eb61
LNG: Swedish (sv_sv)
2025-10-31 20:55:59 +11:00
jokob-sk
78ab0fbd2d
PLG: SNMPDSC typo
2025-10-31 20:45:09 +11:00
Jokob @NetAlertX
19b1fc960c
Merge pull request #1260 from jokob-sk/main
...
BE: Devices Tiles SQL syntax error #1238
2025-10-31 08:15:12 +11:00
jokob-sk
63d6410bb4
BE: handle missing buildtimestamp.txt
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-31 08:12:38 +11:00
Jokob @NetAlertX
929eb1626b
BE: Devices Tiles SQL syntax error #1238
Code checks / check-url-paths (push) Has been cancelled
Deploy MkDocs / deploy (push) Has been cancelled
docker / docker_dev (push) Has been cancelled
2025-10-30 20:48:38 +00:00
Jokob @NetAlertX
5962312afd
Merge pull request #1235 from adamoutler/hardening-fixes
...
Code checks / check-url-paths (push) Has been cancelled
docker / docker_dev (push) Has been cancelled
Deploy MkDocs / deploy (push) Has been cancelled
Hardening fixes
2025-10-28 08:31:30 +11:00
Adam Outler
ededd39d5b
Coderabbit fixes
2025-10-26 17:53:46 +00:00
jokob-sk
8ada2c36f9
BE: 0 in device tiles #1238
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-26 10:58:34 +11:00
Adam Outler
27899469af
use system speedtest, not un-updated & removed script
2025-10-23 08:36:42 +00:00
Adam Outler
7483e46dce
Merge remote-tracking branch 'origin/main' into hardening
2025-10-18 13:23:57 -04:00
jokob-sk
b59bca2967
BE: API in-app messaging endpoint
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-10 17:00:53 +11:00
Adam Outler
016a6adf42
Dockerfile.debian building and running
2025-10-08 19:55:16 -04:00
jokob-sk
314b7e0974
weblate - Farsi - fa_fa + cleanup
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-06 11:21:33 +11:00
jokob-sk
9b76f3c273
LOG_LEVEL not respected #1217
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-05 14:21:29 +11:00
jokob-sk
d05ddafdd3
logger not repsecting new lines #1217
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-05 14:02:00 +11:00
jokob-sk
bdaa53cc53
Merge branch 'main' of https://github.com/jokob-sk/NetAlertX
Code checks / check-url-paths (push) Has been cancelled
docker / docker_dev (push) Has been cancelled
Deploy MkDocs / deploy (push) Has been cancelled
2025-10-05 08:09:03 +11:00
jokob-sk
b2428803a5
LOG_LEVEL not respected #1217
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-10-05 08:08:44 +11:00
priestlypython
1c2721549b
fix: Support compound conditions in SafeConditionBuilder (Issue #1210 )
...
## Problem
PR #1182 introduced SafeConditionBuilder to prevent SQL injection, but it only
supported single-clause conditions. This broke notification filters using multiple
AND/OR clauses, causing user filters like:
`AND devLastIP NOT LIKE '192.168.50.%' AND devLastIP NOT LIKE '192.168.60.%'...`
to be rejected with "Unsupported condition pattern" errors.
## Root Cause
The `_parse_condition()` method used regex patterns that only matched single
conditions. When multiple clauses were chained, the entire string failed to match
any pattern and was rejected for security.
## Solution
Enhanced SafeConditionBuilder with compound condition support:
1. **Added `_is_compound_condition()`** - Detects multiple logical operators
while respecting quoted strings
2. **Added `_parse_compound_condition()`** - Splits compound conditions into
individual clauses and parses each one
3. **Added `_split_by_logical_operators()`** - Intelligently splits on AND/OR
while preserving operators in quoted strings
4. **Refactored `_parse_condition()`** - Routes to compound or single parser
5. **Created `_parse_single_condition()`** - Handles individual clauses (from
original `_parse_condition` logic)
## Testing
- Added comprehensive test suite (19 tests, 100% passing)
- Tested user's exact failing filter (6 AND clauses with NOT LIKE)
- Verified backward compatibility with single conditions
- Validated security (SQL injection attempts still blocked)
- Tested edge cases (mixed AND/OR, whitespace, empty conditions)
## Impact
- ✅ Fixes reported issue #1210
- ✅ Maintains all security protections from PR #1182
- ✅ Backward compatible with existing single-clause filters
- ✅ No breaking changes to API
Fixes #1210
🤖 Generated with [Claude Code](https://claude.ai/code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-10-01 18:31:49 -07:00
jokob-sk
7015ba2f86
LOADED_PLUGINS not processed #1195
...
Signed-off-by: jokob-sk <jokob.sk@gmail.com >
2025-09-29 08:04:53 +10:00