mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-10 01:27:11 +00:00
UNITRONIX
c2aedb10fe
- Implemented input validation for `orgId` and `deviceId` in CDAP and organization detail routes using `assertSafeApiId`, returning a 400 error for invalid inputs. - Added HTML escaping for `deviceId` and `orgId` in views to prevent XSS vulnerabilities. - Hardened `patch-role-scope-i18n.js` against prototype pollution with a guard for unsafe nested keys. - Updated CodeQL configuration to include new exclusions and ensure documented exclusions are applied.
117 lines
5.4 KiB
HTML
117 lines
5.4 KiB
HTML
<%- include('layouts/main', {
|
|
title: _('cdap.device_detail'),
|
|
pageStyles: ['cdap'],
|
|
pageScripts: ['vendor/jmuxer.min', 'rdclient/video', 'cdap-widgets', 'cdap-commands', 'cdap-terminal', 'cdap-desktop', 'cdap-video', 'cdap-filebrowser', 'cdap-audio'],
|
|
currentPage: 'devices',
|
|
breadcrumb: [
|
|
{ label: _('nav.devices'), href: '/devices' },
|
|
{ label: _('cdap.device_detail') }
|
|
],
|
|
body: `
|
|
<div class="cdap-device-page" data-device-id="${escapeHtml(deviceId)}">
|
|
<!-- Device Header -->
|
|
<div class="cdap-device-header">
|
|
<div class="cdap-device-title">
|
|
<a href="/devices" class="btn-icon cdap-back-btn" title="${_('common.back')}">
|
|
<span class="material-icons">arrow_back</span>
|
|
</a>
|
|
<div class="cdap-device-identity">
|
|
<h1 id="cdap-device-name">${escapeHtml(deviceId)}</h1>
|
|
<div class="cdap-device-meta" id="cdap-device-meta">
|
|
<span class="cdap-meta-item" id="cdap-device-type">
|
|
<span class="material-icons">memory</span>
|
|
<span>—</span>
|
|
</span>
|
|
<span class="cdap-meta-item" id="cdap-device-version">
|
|
<span class="material-icons">info_outline</span>
|
|
<span>—</span>
|
|
</span>
|
|
<span class="cdap-meta-item" id="cdap-device-uptime">
|
|
<span class="material-icons">schedule</span>
|
|
<span>—</span>
|
|
</span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="cdap-device-status" id="cdap-device-status">
|
|
<span class="cdap-status-dot"></span>
|
|
<span class="cdap-status-text">${_('cdap.loading')}</span>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Connection Banner (shown when disconnected) -->
|
|
<div class="cdap-offline-banner hidden" id="cdap-offline-banner">
|
|
<span class="material-icons">cloud_off</span>
|
|
<span>${_('cdap.device_offline_msg')}</span>
|
|
</div>
|
|
|
|
<!-- Active Alerts Panel -->
|
|
<div class="cdap-alerts-panel hidden" id="cdap-alerts-panel">
|
|
<div class="cdap-alerts-header">
|
|
<h3>
|
|
<span class="material-icons">warning</span>
|
|
${_('cdap.active_alerts')}
|
|
<span class="cdap-alerts-count" id="cdap-alerts-count">0</span>
|
|
</h3>
|
|
</div>
|
|
<div class="cdap-alerts-list" id="cdap-alerts-list">
|
|
<!-- Alert items rendered by cdap-widgets.js -->
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Linked Devices Panel -->
|
|
<div class="cdap-linked-panel" id="cdap-linked-panel">
|
|
<div class="cdap-linked-header">
|
|
<h3>
|
|
<span class="material-icons">device_hub</span>
|
|
${_('cdap.linked_devices')}
|
|
<span class="cdap-linked-count" id="cdap-linked-count">0</span>
|
|
</h3>
|
|
<button class="btn-sm btn-accent" id="cdap-link-btn" title="${_('cdap.link_device')}">
|
|
<span class="material-icons">add_link</span>
|
|
<span>${_('cdap.link_device')}</span>
|
|
</button>
|
|
</div>
|
|
<div class="cdap-linked-list" id="cdap-linked-list">
|
|
<div class="cdap-linked-empty" id="cdap-linked-empty">
|
|
<span class="material-icons">link_off</span>
|
|
<span>${_('cdap.no_linked_devices')}</span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Widget Grid -->
|
|
<div class="cdap-widget-grid" id="cdap-widget-grid">
|
|
<!-- Widgets rendered by cdap-widgets.js -->
|
|
<div class="cdap-loading" id="cdap-loading">
|
|
<div class="cdap-loading-spinner"></div>
|
|
<p>${_('cdap.loading_widgets')}</p>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Empty State (no manifest) -->
|
|
<div class="cdap-empty hidden" id="cdap-empty">
|
|
<span class="material-icons cdap-empty-icon">widgets</span>
|
|
<h3>${_('cdap.no_widgets')}</h3>
|
|
<p>${_('cdap.no_widgets_desc')}</p>
|
|
</div>
|
|
|
|
<!-- Command Log -->
|
|
<div class="cdap-command-log hidden" id="cdap-command-log">
|
|
<div class="cdap-command-log-header">
|
|
<h3>
|
|
<span class="material-icons">terminal</span>
|
|
${_('cdap.command_log')}
|
|
</h3>
|
|
<button class="btn-icon" id="cdap-clear-log" title="${_('cdap.clear_log')}">
|
|
<span class="material-icons">delete_sweep</span>
|
|
</button>
|
|
</div>
|
|
<div class="cdap-command-log-entries" id="cdap-log-entries">
|
|
<!-- Command log entries appended by cdap-commands.js -->
|
|
</div>
|
|
</div>
|
|
</div>
|
|
`
|
|
}) %>
|