Isaac Connor b0aad5df81 Merge pull request #4989 from connortechnology/ghsa-hw39-api-monitor-acl ...

fix: enforce per-monitor ACL on direct event, frame and zone API endpoints

2026-07-19 13:54:56 -04:00

..

Component

Don't add a space if there is no operator

2025-12-19 17:49:22 -05:00

AppController.php

fix: align auth hash validation with generation and warn on user mismatch

2026-05-14 06:46:01 -04:00

CameraModelsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ConfigsController.php

fix: use method call for System permission check in ConfigsController

2026-07-15 16:17:51 -04:00

ControlsController.php

Merged Angular UI branch API to master

2015-06-11 02:58:58 +00:00

EncoderTemplatesController.php

feat: encoder parameter templates with editor + REST API closes #4778 closes #4802

2026-05-06 17:24:17 -04:00

EventDataController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

EventsController.php

fix: enforce per-monitor ACL on direct event, frame and zone API endpoints

2026-07-19 11:51:54 -04:00

FramesController.php

fix: enforce per-monitor ACL on direct event, frame and zone API endpoints

2026-07-19 11:51:54 -04:00

GroupsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

HostController.php

fix: harden web interface against injection and SSRF vulnerabilities

2026-03-08 23:30:49 -04:00

LogsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ManufacturersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

MonitorsController.php

fix: make monitors API index portable under ONLY_FULL_GROUP_BY

2026-06-14 00:18:26 +10:00

NotificationsController.php

fix: address Copilot review feedback on Notifications API refs #4684

2026-03-05 20:39:54 -05:00

PagesController.php

further merges from cakephp 2.10.8

2018-03-21 13:09:55 -04:00

RolesController.php

feat: add User Roles feature for reusable permission templates

2026-01-29 13:34:27 -05:00

ServersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ServerStatsController.php

Add named parameters support to ServerStatsController.

2023-10-26 18:26:51 -04:00

SnapshotsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

StatesController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

StorageController.php

Add named parameter filtering to Storage controller

2023-05-12 14:10:53 -04:00

TagsController.php

fix: add event ID to tags response. ref #4569

2026-01-26 06:40:42 -05:00

UserPreferenceController.php

Finish roughing in UserPreference in api

2023-05-12 14:10:53 -04:00

UsersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ZonePresetsController.php

fix spacing/quotes/google code style

2018-07-24 16:41:09 -04:00

ZonesController.php

fix: enforce per-monitor ACL on direct event, frame and zone API endpoints

2026-07-19 11:51:54 -04:00