hardening: enforce POST+CSRF for purge syslog devices utility - #318

Open

somethingwithproof wants to merge 11 commits into

Cacti:developfrom

somethingwithproof:fix/259-csrf-purge-utility

Commits on Jul 14, 2026

hardening: enforce POST+CSRF for purge syslog devices utility
somethingwithproof
committed
ea17cc9
fix(csrf): distinct error codes, audit log on non-POST, honest lint header
somethingwithproof
committed
c734b5d
fix(security): harden syslog bulk form and nav encoding
somethingwithproof
committed
bb76f3e
Update syslog_alerts.php

TheWitness
authored and
somethingwithproof
committed
18f7f45
Refactor navigation bar URL in syslog_removal.php

TheWitness
authored and
somethingwithproof
committed
8fb0249
Fix navigation bar URL in syslog_reports.php

TheWitness
authored and
somethingwithproof
committed
4292f09
Address Syslog purge security review
somethingwithproof
committed
2447160
Preserve Syslog filter navigation safely
somethingwithproof
committed
6508f74
Strengthen Syslog CSRF regression coverage
somethingwithproof
committed
7575a9f
Use runner PHP without versioned Apache package
somethingwithproof
committed
e49592a

Commits on Jul 30, 2026

refactor: reuse syslog JSON script encoder
somethingwithproof
committed
09d0197