fix: develop-era hardening pass (security + correctness + tests) - #116

Merged

marcinpsk merged 17 commits into

fix/develop-hardening

Jul 15, 2026

Commits on Jul 2, 2026

fix(security): escape untrusted LibreNMS data and gate verify endpoints
marcinpsk
committed
5cf3e04
fix(hardening): fail closed on malformed payloads, caches, and server keys
marcinpsk
committed
116dfeb
fix(imports): harden bulk import and re-key device-type mappings
marcinpsk
committed
aec0360
fix(modules): harden module sync and swap the table in place over HTMX
marcinpsk
committed
4dabad5
fix(cables,vlans): harden cable/vlan verify and cut per-row queries
marcinpsk
committed
70a8e70
fix(api,models): harden LibreNMS server selection and unify regex validation
marcinpsk
committed
0e570f6
refactor(i2): route object-scoped verify lookups through a NetBoxObjectPermissionMixin helper
marcinpsk
committed
09e042a
feat(i2): object-scope SaveVlanGroupOverrides + convert verify tests to real DB
marcinpsk
committed
ca84aa7
fix(modules): correct VC panel swap + isolate module-interface bind from adopt failures
marcinpsk
committed
003d130
refactor(sync): centralize the live-device-info write-path fetch on LibreNMSAPIMixin
marcinpsk
committed
7147160
fix(bulk-import): drop javascript: href for a button; cover missing-VLAN XSS escaping
marcinpsk
committed
1ea0fa6
test: restore cable-verify server-key classes + DRY the serial-match queryset mock
marcinpsk
committed
a4b9d55

Commits on Jul 3, 2026

Commits on Jul 13, 2026

perf(migration): preload device_type rules once in 0011 renormalize
marcinpsk
committed
039f4db

Commits on Jul 14, 2026

fix(migration): guard 0011 rule preload in its own savepoint
marcinpsk
committed
ade244c