Dev to release - #352

Merged

KelvinTegelaar merged 281 commits into

mainfrom

Aug 21, 2026

GitHub Advanced Security / CodeQL failed Aug 21, 2026 in 3s

7 new alerts including 5 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

5 high
2 medium

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 319 in frontend/src/components/CippComponents/CippApiDialog.jsx

Code scanning / CodeQL

DOM text reinterpreted as HTML High

is reinterpreted as HTML without escaping meta-characters.

is reinterpreted as HTML without escaping meta-characters.

is reinterpreted as HTML without escaping meta-characters.

Check failure on line 614 in frontend/src/components/CippTable/CIPPTableToptoolbar.js

Code scanning / CodeQL

Remote property injection High

A property name to write to depends on a

.
A property name to write to depends on a

.
A property name to write to depends on a

.

Check failure on line 620 in frontend/src/components/CippTable/CIPPTableToptoolbar.js

Code scanning / CodeQL

Remote property injection High

A property name to write to depends on a

.
A property name to write to depends on a

.
A property name to write to depends on a

.

Check failure on line 400 in frontend/src/components/CippTable/CippDataTable.js

Code scanning / CodeQL

Remote property injection High

A property name to write to depends on a

.
A property name to write to depends on a

.

Check failure on line 153 in frontend/src/layouts/index.js

Code scanning / CodeQL

Incomplete string escaping or encoding High

This does not escape backslash characters in the input.

Check warning on line 376 in frontend/src/components/CippFormPages/CippSchedulerForm.jsx

Code scanning / CodeQL

Log injection Medium

Log entry depends on a

.

Check warning on line 208 in frontend/src/components/CippTable/util-columnsFromAPI.js

Code scanning / CodeQL

Prototype-polluting function Medium

Properties are copied from

to

without guarding against prototype pollution.