Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Septentrio Mosaic-x5 support #398

Merged
merged 25 commits into from
May 28, 2024
Merged

Septentrio Mosaic-x5 support #398

merged 25 commits into from
May 28, 2024

Conversation

Stefal
Copy link
Owner

@Stefal Stefal commented May 28, 2024

  • Mosaic-X5 detection (usb)
  • Mosaic-X5 configuration (usb)
  • Reverse proxy server for Mosaic-X5 web interface, with rtkbase authentication

Comment on lines +81 to +88
res = requests.request( # ref. https://stackoverflow.com/a/36601467/248616
method = request.method,
url = request.url.replace(request.host_url, f'{GNSS_RCV_WEB_URL}/'),
headers = {k:v for k,v in request.headers if k.lower() != 'host'}, # exclude 'host' header
data = request.get_data(),
cookies = request.cookies,
allow_redirects = False,
)

Check failure

Code scanning / CodeQL

Full server-side request forgery Critical

The full URL of this request depends on a
user-provided value
.
Copy link
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The GNSS_RCV_WEB_URL is not a user-provided value, but a server side setting.

web_app/gnss_rproxy_server.py Dismissed Show dismissed Hide dismissed
if not next_page or urllib.parse.urlsplit(next_page).netloc != '':
next_page = url_for('redirect_to_API_HOST')

return redirect(next_page)

Check warning

Code scanning / CodeQL

URL redirection from remote source Medium

Untrusted URL redirection depends on a
user-provided value
.
@Stefal Stefal self-assigned this May 28, 2024
@Stefal Stefal merged commit 3b1b355 into dev May 28, 2024
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant