Commit graph

7 commits

Author SHA1 Message Date
Zoey
1dbf57c2ba Merge remote-tracking branch 'upstream/develop' into develop 2024-10-19 18:18:26 +02:00
Jamie Curnow
fe2d8895d6
Cypress test for http and dns cert provision 2024-10-16 14:53:57 +10:00
Jamie Curnow
351ba8dacd
More tests for certificates, fixed schema problems 2024-10-16 08:32:49 +10:00
Zoey
13f3f0d2f0
merge upstream
Signed-off-by: Zoey <zoey@z0ey.de>
2024-10-15 06:51:17 +02:00
Jamie Curnow
c39d5433bc
Fix CVE-2024-46256 and CVE-2024-46257
- Schema validate against bad domain characters
- Integration test for CVE POC examples
- Cypress rewrite of plugins for file upload
2024-10-11 11:31:57 +10:00
Jamie Curnow
4572b205c9
Openapi Schema improvements
- Return proper booleans in api responses
- Update jsonschemavalidation to latest draft
2024-10-10 15:53:11 +10:00
Jamie Curnow
dfe2588523
Refactor API Schema and validation
- /schema now returns full openapi/swagger schema
- That schema is used to validate incoming requests
- And used as a contract in future integration tests
- Moved route files up one level
- Fixed incorrect 404 reponses when getting objects
- Fixed saving new objects and passing jsonschemavalidation
2024-10-09 18:05:15 +10:00