Consolidated hardening, bug fixes, and CI improvements#290

Closed

somethingwithproof wants to merge 7 commits intoCacti:developfrom

somethingwithproof:fix/backport-main-hardening-v2

Commits on Apr 4, 2026

ci: add CodeQL for javascript-typescript, python, ruby
somethingwithproof
committed
fix(ci): use specific runner labels, fix codeql concurrency
somethingwithproof
committed
hardening: prepared statements, XSS fixes, CSRF protection, and CI
somethingwithproof
committed
fix: file-size guard on XML import; parameterize seq IN-list with array_map/implode
somethingwithproof
committed
fix: replace open-redirect blocklist with allowlist in syslog_get_import_xml_payload
somethingwithproof
committed
fix: allowlist path traversal guard, MIME validation, and XSS test robustness
somethingwithproof
committed
fix: log injection guard and XML parse validation in import handler
somethingwithproof
committed