Commit Graph

3 Commits

Author SHA1 Message Date
Matt Borland f008c9d307 HTML-escape values written to output
The code doesn't currently HTML-escape various outputs, and puts them
directly into the raw HTML.  This can lead to cross-site scripting exploits.

Change-Id: Idef647e7eaf268850dcb7ccff44170ffc5d11878
2016-09-30 14:27:28 -06:00
memo 94956bade3 Fix api endpoint for action retrieval
js code cannot reach the api endpoints for action retrieval in specific cases
because it depends on the actual url in the browser

Closes-bug: 1525169
Depends-On: I837e3fe973d72c792cb34711cef9f6507a004d49

Change-Id: Ibffad1a6a24559535c71ea94ba98deeb78ebeccb
2016-01-18 10:56:21 +00:00
memo b08558eba4 Improved horizon dashboard for freezer
action, job, session, backup, clients are now objects in api.py
shield decorator to avoid having boilerplate code in views
move from freezer_ui to disaster_recovery url
improved actions edition in a job
javascript lint
added clients panel
added actions panel
improved restore functionality from the dashboard

Change-Id: I23aed516bcde3a40b24144b05f858d1e3a49a796
2015-11-12 16:21:27 +00:00