Commit Graph

6958 Commits

Author SHA1 Message Date
singh-kanwarpreet
a1cbbf5d42 Added zIndex as earlier causes problem in diagnostics 2025-08-14 15:06:01 +05:30
singh-kanwarpreet
ce667bc53b Improved code quality 2025-08-14 15:02:44 +05:30
singh-kanwarpreet
13a5f699ba Updated Style 2025-08-13 22:53:18 +05:30
singh-kanwarpreet
7ab5f4ab09 Refactored code 2025-08-13 22:41:13 +05:30
singh-kanwarpreet
480ba034ce Made NavBar Still 2025-08-13 14:47:09 +05:30
Alexander Holliday
f2e2d5c2ed Merge pull request #2766 from mertssmnoglu/ci/format-remove-close-pr-step
ci: remove extra 'Close PR' step in check-format workflow
2025-08-12 10:08:23 -07:00
Alexander Holliday
6d999eccbd Merge pull request #2767 from bluewave-labs/fix/reduce-animation-size-in-empty-states
Fix: Reduce animated gif size to 2/3 in empty states
2025-08-12 10:00:03 -07:00
gorkem-bwl
136144b8ec fix: use transform scale instead of width for better border radius preservation 2025-08-12 11:03:46 -04:00
gorkem-bwl
c490508252 fix: reduce animated gif size to 2/3 in empty states
Reduces animation size from 100% to 66.67% width for better visual balance
2025-08-11 23:28:35 -04:00
Gorkem Cetin (BWL)
7b4160ac92 Update README.md 2025-08-11 20:38:53 -04:00
Mert Şişmanoğlu
86dc71687d ci: remove extra 'Close PR' step in check-format workflow
Signed-off-by: Mert Şişmanoğlu <mertssmnoglu@gmail.com>
2025-08-12 01:41:45 +03:00
Alexander Holliday
bb5a3e73c8 Merge pull request #2763 from bluewave-labs/security/add-jwt-cookie-infrastructure
Add JWT Cookie Infrastructure
2025-08-11 15:09:10 -07:00
Alexander Holliday
38b2025286 Merge branch 'develop' into security/add-jwt-cookie-infrastructure 2025-08-11 15:08:54 -07:00
Alexander Holliday
c12f5880e2 Delete server/utils/sanitization.js 2025-08-11 15:07:42 -07:00
Alexander Holliday
94cf22ab8e Merge pull request #2760 from bluewave-labs/security/add-sanitization-infrastructure
Add Input Sanitization Infrastructure
2025-08-11 15:03:37 -07:00
Alex Holliday
0bc8142e71 move to middleware 2025-08-11 15:02:07 -07:00
Alexander Holliday
d890b972be Merge pull request #2762 from bluewave-labs/security/apply-input-sanitization
Apply Input Sanitization for XSS Protection
2025-08-11 14:53:32 -07:00
gorkem-bwl
05945a9a74 feat: add JWT cookie infrastructure
Adds the foundation for secure cookie-based authentication without changing
the authentication flow. This prepares the codebase for moving JWT tokens
from Redux state to httpOnly cookies in a follow-up PR.

Changes:
- Added cookie-parser dependency for HTTP cookie handling
- Added cookieParser() middleware to Express application
- Created cookieHelpers.js utilities for consistent cookie options
- Includes getAuthCookieOptions() for setting secure authentication cookies
- Includes getClearAuthCookieOptions() for clearing cookies on logout

Infrastructure only - no behavioral changes to authentication flow yet.

Files added/modified:
- package.json (cookie-parser dependency)
- src/app.js (cookieParser middleware)
- src/utils/cookieHelpers.js (cookie utilities)

Next steps:
- Follow-up PR will modify JWT verification to check cookies
- Enable secure cookie-based authentication
- Add logout functionality to clear httpOnly cookies

Risk level: LOW (infrastructure only, no authentication changes)
2025-08-11 17:47:09 -04:00
gorkem-bwl
88b68a9df0 fix: apply prettier formatting to app.js
Fixed formatting issues to pass CI/CD checks
2025-08-11 17:39:08 -04:00
gorkem-bwl
8b322a0ec0 feat: apply input sanitization to prevent XSS attacks
Enables comprehensive XSS protection by applying sanitization middleware
to all incoming requests. Uses the sanitization utilities added in previous PR.

Changes:
- Added sanitizeBody() and sanitizeQuery() middleware after express.json()
- Enhanced Content Security Policy headers for additional XSS protection
- Added 'object-src: none' and 'base-uri: self' directives
- All user inputs now automatically sanitized before processing

Security improvements:
- Prevents stored XSS attacks through HTML sanitization
- Recursive sanitization handles nested objects and arrays
- Maintains backward compatibility with existing functionality
- Strengthened CSP headers block unsafe content injection

Files changed: src/app.js (9 lines added)
Risk level: Medium (global middleware application)
2025-08-11 17:33:05 -04:00
gorkem-bwl
7968ed8a19 fix: apply prettier formatting to sanitization.js
Fixed formatting issues identified by CI/CD system
2025-08-11 17:26:28 -04:00
gorkem-bwl
2fba22d0f6 feat: add input sanitization infrastructure
Adds foundational utilities for XSS prevention without applying them yet.
This prepares the codebase for comprehensive input sanitization in a follow-up PR.

Changes:
- Added isomorphic-dompurify and jsdom dependencies
- Created sanitization utilities in src/utils/sanitization.js
- Includes recursive object sanitization functions
- Provides Express middleware for body and query sanitization

Infrastructure only - no behavioral changes yet.

Files added:
- src/utils/sanitization.js (sanitization utilities)
- package.json (new dependencies)

Next steps:
- Apply sanitization middleware in follow-up PR
- Enable XSS protection across application
2025-08-11 17:23:14 -04:00
Alexander Holliday
cce930b90a Merge pull request #2757 from bluewave-labs/fix/update-openapi-docs
fix: update openapi specs
2025-08-11 13:56:33 -07:00
Alex Holliday
c5dd16511d update openapi specs 2025-08-11 13:55:01 -07:00
Alexander Holliday
17cac37967 Merge pull request #2736 from burak28/feat/add-game-server-support
Feat/add game server support
2025-08-08 15:11:06 -07:00
Burak Arslan
b7e7028b6f Fix error handling and method assignment in requestGame function 2025-08-08 23:59:41 +03:00
Alexander Holliday
ea3df7be42 Merge pull request #2749 from bluewave-labs/fix/gap-select-components
Fix/gap select components
2025-08-08 09:27:21 -07:00
karenvicent
f0d7e82e22 Merge branch 'develop' into fix/gap-select-components 2025-08-07 18:53:58 -04:00
karenvicent
c6d56b30e4 fix gaps in select components 2025-08-07 18:53:05 -04:00
Alexander Holliday
8225924da6 Merge pull request #2746 from vineet-channe/feature/yellow-range-infrastructure-monitors
feat: Add yellow warning range (50-80%) for infrastructure monitors
2025-08-07 14:54:00 -07:00
Alexander Holliday
6517e9ee6c Merge pull request #2748 from bluewave-labs/feat/fe/sidebar-theme
Feat: Theme Switch Removal from Sidebar
2025-08-07 14:53:15 -07:00
vineet-channe
10ad3397a3 docs(CustomGauge): remove threshold prop from documentation and usage example
- Removed all references to the unused  prop from the JSDoc and usage example in the CustomGauge component.
- Ensured PropTypes and documentation accurately
2025-08-08 03:03:23 +05:30
Br0wnHammer
dd9468cb2e Remove unused Imports 2025-08-08 02:06:44 +05:30
Br0wnHammer
0b9ab0614f Tooltip Position 2025-08-08 01:31:20 +05:30
Br0wnHammer
e13f495d71 Remove Redundant Stack 2025-08-08 01:11:27 +05:30
Br0wnHammer
029b8fac37 Feat: Remove Theme Toggle Button 2025-08-08 01:07:49 +05:30
Alexander Holliday
6e5ada79de Merge pull request #2742 from bluewave-labs/feat/register-page
Feat/register page
2025-08-07 09:20:07 -07:00
Alexander Holliday
59f050135a Merge pull request #2744 from bluewave-labs/fix/fe/appname-color
Fix: Checkmate Color
2025-08-07 09:15:09 -07:00
vineet-channe
dc8b0aed9f chore: format CustomGauge with Prettier 2025-08-07 20:46:15 +05:30
vineet-channe
424df24bf3 feat: Add yellow warning range (50-80%) for infrastructure monitors
Fixes #2615
2025-08-07 20:35:24 +05:30
Br0wnHammer
d451f725cd Redundant sx prop 2025-08-07 18:21:50 +05:30
Br0wnHammer
d04b8fddb0 Fix: Appname Color 2025-08-07 18:04:58 +05:30
karenvicent
bb592964ee Merge branch 'develop' into feat/register-page 2025-08-06 17:19:21 -04:00
karenvicent
786dd427bc feat: Update Register page to match new Login design for consistent UX 2025-08-06 17:17:44 -04:00
Burak Arslan
4c2c452b91 Improve validation and error handling on form field 2025-08-06 00:53:35 +03:00
Alexander Holliday
1765bf7e55 Merge pull request #2740 from vineet-channe/fix-diagnostic-page-design
fix: update diagnostic page design to match infrastructure page
2025-08-05 10:10:35 -07:00
Alexander Holliday
e19de23770 Merge pull request #2693 from Owaiseimdad/Network-tab-implementation-infra
Network tab implementation infra, in api at backend
2025-08-05 09:54:17 -07:00
ThetaOI
02b7dc080b Merge branch 'bluewave-labs:develop' into Network-tab-implementation-infra 2025-08-05 19:49:38 +05:30
Owaise
d4e8381827 Renamed them as average values in the table. 2025-08-05 19:43:35 +05:30
vineet-channe
de34710c90 fix: address review feedback
- Replace hardcoded button text with translation
- Fix status box translation to avoid showing removed title
- Add conditional rendering for optional gauge metrics
2025-08-05 17:35:40 +05:30