Commit Graph
9086 Commits
Author SHA1 Message Date
Alexander Holliday e32e72de7a Merge pull request #2741 from Owaiseimdad/Network-tab-implementation-FE
Network tab implementation fe
2025-08-14 09:22:09 -07:00
Owaise ff31ee773f Added a drop down so that we have choice to make about which network interface to choose. 2025-08-14 19:35:12 +05:30
singh-kanwarpreet a1cbbf5d42 Added zIndex as earlier causes problem in diagnostics 2025-08-14 15:06:01 +05:30
singh-kanwarpreet ce667bc53b Improved code quality 2025-08-14 15:02:44 +05:30
Alex Holliday d5526b89d9 remove redis references 2025-08-13 15:22:03 -07:00
Alex Holliday 096cfccf40 update dokcer compose files to remove mongo replica set config 2025-08-13 15:16:01 -07:00
Tafadzwa Chiwozva f381b0ce4a docs: add guide and tooling for custom CA trust in Dockerized Checkmate (Fixes #2747) 2025-08-13 17:50:30 -04:00
Alexander Holliday 867b530573 Merge pull request #2765 from bluewave-labs/refactor-login-page
Refactor login page
2025-08-13 14:38:12 -07:00
Owaise 2141c3eacd Metrics validated. 2025-08-14 00:04:53 +05:30
singh-kanwarpreet 13a5f699ba Updated Style 2025-08-13 22:53:18 +05:30
singh-kanwarpreet 7ab5f4ab09 Refactored code 2025-08-13 22:41:13 +05:30
singh-kanwarpreet 480ba034ce Made NavBar Still 2025-08-13 14:47:09 +05:30
karenvicent d560e923d2 Merge branch 'develop' into refactor-login-page 2025-08-12 14:30:55 -04:00
karenvicent 235fc979b2 move hooks to login file 2025-08-12 14:30:11 -04:00
Owaise f5aefb1f0b Ran formattor. 2025-08-12 23:49:45 +05:30
Owaise e27cc8a12b Added delta instead of avg, and formatted the code to re-use already existing code. 2025-08-12 23:48:47 +05:30
Alexander Holliday f2e2d5c2ed Merge pull request #2766 from mertssmnoglu/ci/format-remove-close-pr-step
ci: remove extra 'Close PR' step in check-format workflow
2025-08-12 10:08:23 -07:00
Alexander Holliday 6d999eccbd Merge pull request #2767 from bluewave-labs/fix/reduce-animation-size-in-empty-states
Fix: Reduce animated gif size to 2/3 in empty states
2025-08-12 10:00:03 -07:00
gorkem-bwl 136144b8ec fix: use transform scale instead of width for better border radius preservation 2025-08-12 11:03:46 -04:00
Owaise 355a445ead Fixed the code for linus, windows and mac based. Also made changes to pipeline. 2025-08-12 10:05:58 +05:30
gorkem-bwl c490508252 fix: reduce animated gif size to 2/3 in empty states
Reduces animation size from 100% to 66.67% width for better visual balance
2025-08-11 23:28:35 -04:00
Gorkem Cetin (BWL) 7b4160ac92 Update README.md 2025-08-11 20:38:53 -04:00
karenvicent 781854d85c delete console.log 2025-08-11 18:42:33 -04:00
Mert Şişmanoğlu 86dc71687d ci: remove extra 'Close PR' step in check-format workflow
Signed-off-by: Mert Şişmanoğlu <mertssmnoglu@gmail.com>
2025-08-12 01:41:45 +03:00
karenvicent f0e79121a7 Merge branch 'develop' into refactor-login-page 2025-08-11 18:22:11 -04:00
karenvicent ed1b88f1fd refactor login page 2025-08-11 18:21:23 -04:00
Alexander Holliday bb5a3e73c8 Merge pull request #2763 from bluewave-labs/security/add-jwt-cookie-infrastructure
Add JWT Cookie Infrastructure
2025-08-11 15:09:10 -07:00
Alexander Holliday 38b2025286 Merge branch 'develop' into security/add-jwt-cookie-infrastructure 2025-08-11 15:08:54 -07:00
Alexander Holliday c12f5880e2 Delete server/utils/sanitization.js 2025-08-11 15:07:42 -07:00
Alexander Holliday 94cf22ab8e Merge pull request #2760 from bluewave-labs/security/add-sanitization-infrastructure
Add Input Sanitization Infrastructure
2025-08-11 15:03:37 -07:00
Alex Holliday 0bc8142e71 move to middleware 2025-08-11 15:02:07 -07:00
Alexander Holliday d890b972be Merge pull request #2762 from bluewave-labs/security/apply-input-sanitization
Apply Input Sanitization for XSS Protection
2025-08-11 14:53:32 -07:00
gorkem-bwl 05945a9a74 feat: add JWT cookie infrastructure
Adds the foundation for secure cookie-based authentication without changing
the authentication flow. This prepares the codebase for moving JWT tokens
from Redux state to httpOnly cookies in a follow-up PR.

Changes:
- Added cookie-parser dependency for HTTP cookie handling
- Added cookieParser() middleware to Express application
- Created cookieHelpers.js utilities for consistent cookie options
- Includes getAuthCookieOptions() for setting secure authentication cookies
- Includes getClearAuthCookieOptions() for clearing cookies on logout

Infrastructure only - no behavioral changes to authentication flow yet.

Files added/modified:
- package.json (cookie-parser dependency)
- src/app.js (cookieParser middleware)
- src/utils/cookieHelpers.js (cookie utilities)

Next steps:
- Follow-up PR will modify JWT verification to check cookies
- Enable secure cookie-based authentication
- Add logout functionality to clear httpOnly cookies

Risk level: LOW (infrastructure only, no authentication changes)
2025-08-11 17:47:09 -04:00
gorkem-bwl 88b68a9df0 fix: apply prettier formatting to app.js
Fixed formatting issues to pass CI/CD checks
2025-08-11 17:39:08 -04:00
gorkem-bwl 8b322a0ec0 feat: apply input sanitization to prevent XSS attacks
Enables comprehensive XSS protection by applying sanitization middleware
to all incoming requests. Uses the sanitization utilities added in previous PR.

Changes:
- Added sanitizeBody() and sanitizeQuery() middleware after express.json()
- Enhanced Content Security Policy headers for additional XSS protection
- Added 'object-src: none' and 'base-uri: self' directives
- All user inputs now automatically sanitized before processing

Security improvements:
- Prevents stored XSS attacks through HTML sanitization
- Recursive sanitization handles nested objects and arrays
- Maintains backward compatibility with existing functionality
- Strengthened CSP headers block unsafe content injection

Files changed: src/app.js (9 lines added)
Risk level: Medium (global middleware application)
2025-08-11 17:33:05 -04:00
gorkem-bwl 7968ed8a19 fix: apply prettier formatting to sanitization.js
Fixed formatting issues identified by CI/CD system
2025-08-11 17:26:28 -04:00
gorkem-bwl 2fba22d0f6 feat: add input sanitization infrastructure
Adds foundational utilities for XSS prevention without applying them yet.
This prepares the codebase for comprehensive input sanitization in a follow-up PR.

Changes:
- Added isomorphic-dompurify and jsdom dependencies
- Created sanitization utilities in src/utils/sanitization.js
- Includes recursive object sanitization functions
- Provides Express middleware for body and query sanitization

Infrastructure only - no behavioral changes yet.

Files added:
- src/utils/sanitization.js (sanitization utilities)
- package.json (new dependencies)

Next steps:
- Apply sanitization middleware in follow-up PR
- Enable XSS protection across application
2025-08-11 17:23:14 -04:00
Alexander Holliday cce930b90a Merge pull request #2757 from bluewave-labs/fix/update-openapi-docs
fix: update openapi specs
2025-08-11 13:56:33 -07:00
Alex Holliday c5dd16511d update openapi specs 2025-08-11 13:55:01 -07:00
Owaise 65f437f08e Merge remote-tracking branch 'origin' into Network-tab-implementation-FE 2025-08-09 12:21:21 +05:30
Owaise 47c231a214 Formating done. 2025-08-09 12:17:25 +05:30
Owaise f5d0b74ccf Fixed the processing to be done in backend now. 2025-08-09 12:14:25 +05:30
Alexander Holliday 17cac37967 Merge pull request #2736 from burak28/feat/add-game-server-support
Feat/add game server support
2025-08-08 15:11:06 -07:00
Burak Arslan b7e7028b6f Fix error handling and method assignment in requestGame function 2025-08-08 23:59:41 +03:00
Alexander Holliday ea3df7be42 Merge pull request #2749 from bluewave-labs/fix/gap-select-components
Fix/gap select components
2025-08-08 09:27:21 -07:00
karenvicent f0d7e82e22 Merge branch 'develop' into fix/gap-select-components 2025-08-07 18:53:58 -04:00
karenvicent c6d56b30e4 fix gaps in select components 2025-08-07 18:53:05 -04:00
Alexander Holliday 8225924da6 Merge pull request #2746 from vineet-channe/feature/yellow-range-infrastructure-monitors
feat: Add yellow warning range (50-80%) for infrastructure monitors
2025-08-07 14:54:00 -07:00
Alexander Holliday 6517e9ee6c Merge pull request #2748 from bluewave-labs/feat/fe/sidebar-theme
Feat: Theme Switch Removal from Sidebar
2025-08-07 14:53:15 -07:00
vineet-channe 10ad3397a3 docs(CustomGauge): remove threshold prop from documentation and usage example
- Removed all references to the unused  prop from the JSDoc and usage example in the CustomGauge component.
- Ensured PropTypes and documentation accurately
2025-08-08 03:03:23 +05:30