2GT-RichandClaude Sonnet 4.6
fc27f2a4a2
Log injection (3 errors fixed): - errorHandler.ts: sanitize req.path before logging (strip \r\n) - clients.ts: sanitize mac param in two Flux error log lines Dismissed as false positives or won't-fix with justifications: - Insecure Helmet config: CSP intentionally disabled (self-hosted, Vite/React inline styles require complex allowlist) - Permissive CORS: wildcard only active when admin explicitly sets CORS_ORIGIN=*, documented as unsafe - Network data to file (cert.ts x2): intentional cert upload feature - File system race (oui.ts): trusted startup URL, no attack surface - Insecure temp file (oui.ts): server-side OUI DB, not user-accessible - Remote property injection (DeviceCollector.ts): data from trusted RouterOS API on admin-credentialed device, not user HTTP input - Rate limiting (19): all routes behind JWT; login already rate-limited Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
50 lines
1.3 KiB
JSON
50 lines
1.3 KiB
JSON
{
|
|
"name": "mikrotik-manager-frontend",
|
|
"version": "0.11.10-beta",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc && vite build",
|
|
"preview": "vite preview",
|
|
"lint": "eslint src",
|
|
"test": "vitest run"
|
|
},
|
|
"dependencies": {
|
|
"@tanstack/react-query": "^5.17.1",
|
|
"@types/leaflet": "^1.9.21",
|
|
"@xterm/addon-fit": "^0.11.0",
|
|
"@xterm/xterm": "^6.0.0",
|
|
"@xyflow/react": "^12.10.2",
|
|
"axios": "^1.16.0",
|
|
"clsx": "^2.1.0",
|
|
"date-fns": "^3.2.0",
|
|
"leaflet": "^1.9.4",
|
|
"lucide-react": "^0.309.0",
|
|
"react": "^18.2.0",
|
|
"react-dom": "^18.2.0",
|
|
"react-router-dom": "^6.21.1",
|
|
"recharts": "^2.10.3",
|
|
"socket.io-client": "^4.7.3",
|
|
"tailwind-merge": "^3.5.0",
|
|
"zustand": "^4.4.7"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/js": "^9.39.4",
|
|
"@types/react": "^18.2.48",
|
|
"@types/react-dom": "^18.2.18",
|
|
"@vitejs/plugin-react": "^4.2.1",
|
|
"autoprefixer": "^10.4.17",
|
|
"eslint": "^9.39.4",
|
|
"eslint-plugin-react": "^7.37.5",
|
|
"eslint-plugin-react-hooks": "^7.0.1",
|
|
"eslint-plugin-security": "^4.0.0",
|
|
"postcss": "^8.5.10",
|
|
"tailwindcss": "^3.4.1",
|
|
"typescript": "^5.9.3",
|
|
"typescript-eslint": "^8.58.2",
|
|
"vite": "^5.0.11",
|
|
"vitest": "^3.0.5"
|
|
}
|
|
}
|