luci/applications/luci-app-bmx7/root, branch master

luci-app-bmx7: prevent path traversal in bmx7-info CGI

2026-07-20T18:40:32Z

Resolve QUERY to its canonical path and reject any result escaping BMX7_DIR, blocking traversal via ../../ etc. in untrusted user input. Fold check_path() into print_query(), use readlink -f for canonicalization, and use the validated resolved path for all file I/O. Fix for-loops to iterate directory contents with proper globbing. Fixes: GHSA-8qcq-jgrj-gvmj Signed-off-by: Jo-Philipp Wich

luci-app-bmx7: convert to JS

2026-02-24T00:23:31Z

migrate away from the old luci-app lua control system. See: https://github.com/openwrt/luci/issues/7310 The lua app was relatively broken prior to conversion. Strangely, bmx7-uci-config package is what installs the init.d service and uci config. Signed-off-by: Paul Donald

treewide: vectorise iconography

2025-06-12T16:55:53Z

Clear, crisp, resolution independent vector graphics replace the trusty microscopic PNG. Some minor CSS changes were needed to constrain images in some locations to make sure they don't consume too much space. Iconography taken from Mate desktop theme with minor adjustments: https://github.com/mate-desktop/mate-icon-theme/ Signed-off-by: Paul Donald

treewide: HTML Cleanup

2024-11-22T21:39:46Z

* HTML Cleanup: Meta tags. * Converted charset to shorthand. * Removed meta tags with `Content-Script-Type` attribute. (Invalid in HTML5 spec.) * HTML Cleanup: CSS tags. * Removed `type` attribute with CSS files from link tags. (HTML5 spec recommends omitting it.) * Removed `type` attribute from style tags. (Deprecated in HTML5 spec.) https://html.spec.whatwg.org/#attr-link-type https://developer.mozilla.org/en-US/docs/Web/HTML/Element/style * HTML Cleanup: Convert from XHTML to HTML5 * Removed XML declaration. * Removed XML namespace. * Changed doctype to HTML5. * HTML Cleanup: CDATA tags. * CDATA sections should not be used within HTML they are considered as comments and not displayed. https://developer.mozilla.org/en-US/docs/Web/API/CDATASection * HTML Cleanup: Script tags. * Removed `language` attribute from script tags. (No longer valid in HTML5) * Removed `type` attribute with JavaScript MIME type from script tags. (HTML5 spec recommends omitting it.) https://html.spec.whatwg.org/multipage/scripting.html#attr-script-type https://mimesniff.spec.whatwg.org/#javascript-mime-type Signed-off-by: Mustafa Can Elmacı

luci-app-bmx7: Code quality fixes

2024-01-31T01:54:58Z

Add integrity check for externally loaded d3 lib Signed-off-by: Paul Donald

luci-app-bmx7: optimized images filesizes

2022-06-24T23:47:38Z

Wifi icons optimized without any quality degradation. Bmx7logo filesize rediced from 5121 to 3318 bytes, visually looks the same, technically the image is 99.9% identical. Signed-off-by: Alexander Semukhin

luci-app-bmx7: fix markup which is not valid XHTML

2021-10-08T17:53:09Z

Replace `
` with `
` as XHTML does not allow self-closing tags. Signed-off-by: Jo-Philipp Wich

luci-app-bmx7: fix displaying values

2020-10-29T17:03:55Z

Suggested-by: FreifunkUFO Signed-off-by: Daniel Golle

luci-app-bmx7: mask CSS translate directives to avoid i18n confusion

2020-01-09T10:19:39Z

Since bmx7's netjsongraph.js contains CSS `translate()` directives, they're treated as translation calls by the i18n source scanner. Mask these directives to avoid false positives. Fixes: #3484 Signed-off-by: Jo-Philipp Wich

luci-app-bmx7: fix typos

2019-12-17T10:26:30Z

Signed-off-by: Balázs Úr