Pulse Monitor 63f18afdef fix: iframe embedding checkbox persistence and functionality (addresses #351) ...

- Fixed /api/config/system endpoint to return all persisted settings fields including allowEmbedding, discoveryEnabled, and allowedEmbedOrigins
- Added comprehensive input validation for all settings with proper min/max bounds
- Fixed security headers to properly allow/deny iframe embedding based on user preference
- Added real bug detection test suite that validates behavior, not just status codes

The iframe embedding checkbox now properly persists its state and actually controls whether Pulse can be embedded in iframes. When enabled, removes X-Frame-Options header and sets CSP frame-ancestors to allow embedding.

2025-08-28 09:17:54 +00:00

..

alerts.go

fix: reorder alert routes to handle bulk operations correctly

2025-08-23 16:56:02 +00:00

auth.go

feat: improve account lockout mechanism with recovery options

2025-08-27 21:43:25 +00:00

config_handlers.go

fix: iframe embedding checkbox persistence and functionality (addresses #351)

2025-08-28 09:17:54 +00:00

csrf_store.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

diagnostics.go

feat: add comprehensive VM disk monitoring diagnostics

2025-08-25 15:34:05 +00:00

frontend_embed.go

fix: node summary tables now appear on initial page load

2025-08-26 16:27:19 +00:00

guest_metadata.go

fix: reload guest metadata after import

2025-08-14 09:51:40 +00:00

middleware.go

fix: prevent 301 redirect to relative path (./) when accessing root without trailing slash (addresses #334)

2025-08-19 18:56:18 +00:00

notifications.go

fix: properly report HTTP errors in webhook tests

2025-08-23 07:33:14 +00:00

rate_limit_config.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

ratelimit.go

feat: add comprehensive security system for API protection

2025-08-06 21:39:52 +00:00

recovery_tokens.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

router.go

feat: improve account lockout mechanism with recovery options

2025-08-27 21:43:25 +00:00

security_setup_fix.go

fix: restore API token functionality when auth is disabled

2025-08-21 12:26:08 +00:00

security.go

fix: iframe embedding checkbox persistence and functionality (addresses #351)

2025-08-28 09:17:54 +00:00

session_store.go

security: comprehensive security improvements

2025-08-25 11:28:55 +00:00

settings.go

fix: ensure consistent CPU core display for all guests

2025-08-09 15:03:28 +00:00

system_settings.go

fix: iframe embedding checkbox persistence and functionality (addresses #351)

2025-08-28 09:17:54 +00:00

types.go

improve: comprehensive type safety improvements across codebase

2025-08-19 21:32:44 +00:00

updates.go

fix: complete update system improvements

2025-08-07 11:43:40 +00:00