commit 66f43b42363b9433c0d74ba1e39eb4eb9c9df731
Author: Arkadiusz Miśkiewicz <[email protected]>
Date: Thu Aug 1 11:14:08 2024 +0200
Up to 4.5.3
remove-information-leak.patch | 140 ++++++++++++++++++++++++++++++++++++++++++
1 file changed, 140 insertions(+)
---
diff --git a/remove-information-leak.patch b/remove-information-leak.patch
new file mode 100644
index 0000000..b1a1f49
--- /dev/null
+++ b/remove-information-leak.patch
@@ -0,0 +1,140 @@
+diff -urN nagios-4.5.3.org/cgi/extinfo.c nagios-4.5.3/cgi/extinfo.c
+--- nagios-4.5.3.org/cgi/extinfo.c 2024-06-11 16:50:20.000000000 +0200
++++ nagios-4.5.3/cgi/extinfo.c 2024-08-01 10:36:50.536637843 +0200
+@@ -557,27 +557,6 @@
+ printf("<LINK REL='stylesheet' TYPE='text/css' HREF='%s%s'>\n",
url_stylesheets_path, NAGFUNCS_CSS);
+ }
+
+- if (display_type == DISPLAY_HOST_INFO)
+- vidurl = "https://www.youtube.com/embed/n3QEAf-MxY4";;
+- else if(display_type == DISPLAY_SERVICE_INFO)
+- vidurl = "https://www.youtube.com/embed/f_knwQOS6FI";;
+-
+- if (enable_page_tour == TRUE && vidurl) {
+- printf("<script type='text/javascript' src='%s%s'></script>\n",
url_js_path, JQUERY_JS);
+- printf("<script type='text/javascript' src='%s%s'></script>\n",
url_js_path, NAGFUNCS_JS);
+- printf("<script type='text/javascript'>\n");
+- printf("var vbox, vBoxId='extinfo%d', vboxText = "
+- "'<a href=https://www.nagios.com/tours
target=_blank>"
+- "Click here to watch the entire Nagios Core 4
Tour!</a>';\n",
+- display_type);
+- printf("$(document).ready(function() {\n"
+- "var user = '%s';\nvBoxId += ';' + user;\n",
+- current_authdata.username);
+- printf("vbox = new vidbox({pos:'lr',vidurl:'%s',text:vboxText,"
+- "vidid:vBoxId});\n", vidurl);
+- printf("});\n</script>\n");
+- }
+-
+ printf("</head>\n");
+
+ printf("<body CLASS='extinfo'>\n");
+diff -urN nagios-4.5.3.org/cgi/status.c nagios-4.5.3/cgi/status.c
+--- nagios-4.5.3.org/cgi/status.c 2024-06-11 16:50:20.000000000 +0200
++++ nagios-4.5.3/cgi/status.c 2024-08-01 10:36:50.539971176 +0200
+@@ -556,31 +556,8 @@
+ /* JS function to append content to elements on page */
+ printf("<script type='text/javascript'>\n");
+ if (enable_page_tour == TRUE) {
+- printf("var vbox, vBoxId='status%d%d', vboxText = "
+- "'<a href=https://www.nagios.com/tours
target=_blank>"
+- "Click here to watch the entire Nagios Core 4
Tour!</a>';\n",
+- display_type, group_style_type);
+ printf("$(document).ready(function() {\n"
+
"$('#top_page_numbers').append($('#bottom_page_numbers').html() );\n");
+- if (display_type == DISPLAY_HOSTS)
+- vidurl = "https://www.youtube.com/embed/ahDIJcbSEFM";;
+- else if(display_type == DISPLAY_SERVICEGROUPS) {
+- if (group_style_type == STYLE_HOST_DETAIL)
+- vidurl =
"https://www.youtube.com/embed/nNiRr0hDZag";;
+- else if (group_style_type == STYLE_OVERVIEW)
+- vidurl =
"https://www.youtube.com/embed/MyvgTKLyQhA";;
+- } else {
+- if (group_style_type == STYLE_OVERVIEW)
+- vidurl =
"https://www.youtube.com/embed/jUDrjgEDb2A";;
+- else if (group_style_type == STYLE_HOST_DETAIL)
+- vidurl =
"https://www.youtube.com/embed/nNiRr0hDZag";;
+- }
+- if (vidurl) {
+- printf("var user = '%s';\nvBoxId += ';' + user;",
+- current_authdata.username);
+- printf("vbox = new
vidbox({pos:'lr',vidurl:'%s',text:vboxText,"
+- "vidid:vBoxId});\n", vidurl);
+- }
+ printf("});\n");
+ }
+ printf("function set_limit(url) { \nthis.location =
url+'&limit='+$('#limit').val();\n }\n");
+diff -urN nagios-4.5.3.org/cgi/tac.c nagios-4.5.3/cgi/tac.c
+--- nagios-4.5.3.org/cgi/tac.c 2024-06-11 16:50:20.000000000 +0200
++++ nagios-4.5.3/cgi/tac.c 2024-08-01 10:36:50.539971176 +0200
+@@ -308,17 +308,7 @@
+
+ if (enable_page_tour == TRUE) {
+ printf("<script type='text/javascript' src='%s%s'></script>\n",
url_js_path, NAGFUNCS_JS);
+-
+- printf("<script type='text/javascript'>\nvar vbox,
vBoxId='tac', "
+- "vboxText = '<a
href=https://www.nagios.com/tours target=_blank>"
+- "Click here to watch the entire Nagios Core 4
Tour!</a>';\n");
+- printf("$(document).ready(function() {\n"
+- "var user = '%s';\nvBoxId += ';' + user;",
current_authdata.username);
+- printf("vbox = new vidbox({pos:'lr',"
+-
"vidurl:'https://www.youtube.com/embed/l20YRDhbOfA',text:vboxText,"
+- "vidid:vBoxId});");
+- printf("\n});\n</script>\n");
+- }
++ }
+
+
+
+diff -urN nagios-4.5.3.org/html/main.php nagios-4.5.3/html/main.php
+--- nagios-4.5.3.org/html/main.php 2024-06-11 16:50:20.000000000 +0200
++++ nagios-4.5.3/html/main.php 2024-08-01 10:36:50.539971176 +0200
+@@ -19,20 +19,7 @@
+
+ <script type='text/javascript'>
+ var cookie;
+- <?php if ($cfg["enable_page_tour"]) { ?>
+- var vbox;
+- var vBoxId = "main";
+- var vboxText = "<a href=https://www.nagios.com/tours
target=_blank> " +
+- "Click here to watch the entire
Nagios Core 4 Tour!</a>";
+- <?php } ?>
+ $(document).ready(function() {
+- var user = "<?php echo
htmlspecialchars($_SERVER['REMOTE_USER']); ?>";
+-
+- <?php if ($cfg["enable_page_tour"]) { ?>
+- vBoxId += ";" + user;
+- vbox = new
vidbox({pos:'lr',vidurl:'https://www.youtube.com/embed/2hVBAet-XpY',
+-
text:vboxText,vidid:vBoxId});
+- <?php } ?>
+ loadRemoteFeed( // Our top banner splash.
+ '#splashbox0-contents', 'corebanner', 1,
+ '', processBannerItem, ''
+@@ -59,7 +46,6 @@
+ crossDomain: true,
+ success: function(d, status, jqXHR) {
+ // We should have Internet access, set the
playlist HTML.
+- initializePlaylist();
+
+ var text = ''; // Start with empty text by
default.
+
+@@ -94,19 +80,6 @@
+ : '';
+ }
+
+-
+- // Set our playlist HTML when we know we have Internet access.
+- var playlistInitialized = false;
+- function initializePlaylist() {
+- if (!playlistInitialized) {
+- playlistInitialized = true;
+- $('#splashbox3')
+- .addClass('splashbox3-full')
+- .removeClass('splashbox3-empty')
+- .html('<iframe width="100%" height="100%"
src="//www.youtube.com/embed/videoseries?list=PLN-ryIrpC_mCUW1DFwZpxpAk00i60lSkE&iv_load_policy=3&rel=0"
frameborder="0" allowfullscreen></iframe>');
+- }
+- }
+-
+ // Get the daemon status JSON.
+ function getCoreStatus() {
+ setCoreStatusHTML('passiveonly', 'Checking process status...');
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/nagios.git/commitdiff/66f43b42363b9433c0d74ba1e39eb4eb9c9df731
_______________________________________________
pld-cvs-commit mailing list
[email protected]
http://lists.pld-linux.org/mailman/listinfo/pld-cvs-commit
