aprs.me/lib/aprsme_web/live
Graham McIntire 94f3a62539
Add comprehensive input sanitization for coordinate parsing
Security improvements:
- Added sanitize_numeric_string to remove dangerous characters
- Limited input string length to prevent DoS attacks (20 chars for numbers)
- Added is_finite? checks to prevent infinity/NaN values
- Validate coordinate ranges (lat: -90 to 90, lng: -180 to 180)
- Added safe_parse_coordinate with proper validation
- Updated to_float in EncodingUtils with security validations
- Protected against integer overflow in coordinate conversions
- Added sanitize_path_string for APRS path validation

All coordinate inputs from users are now:
1. Sanitized to remove injection characters
2. Length-limited to prevent resource exhaustion
3. Validated for finite values (no infinity/NaN)
4. Checked against valid geographic ranges
5. Given safe fallback defaults

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-07-14 10:20:10 -05:00
..
bad_packets_live badpackets formatting 2025-07-12 08:02:51 -05:00
components fix compile warnings 2025-07-09 16:58:07 -05:00
info_live add more info on info page 2025-07-13 10:12:59 -05:00
map_live Add comprehensive input sanitization for coordinate parsing 2025-07-14 10:20:10 -05:00
packets_live fix info/neighbor page loading 2025-07-10 14:43:00 -05:00
shared dont parse device identifiers on each insert 2025-07-10 15:16:01 -05:00
status_live cleanup 2025-07-13 09:35:40 -05:00
weather_live integrate /:call to main page 2025-07-13 10:36:58 -05:00
about_live.ex en español 2025-07-05 15:51:39 -05:00
about_live.html.heex en español 2025-07-05 15:51:39 -05:00
api_docs_live.ex refactor and performance improvements 2025-07-10 10:53:34 -05:00
locale_hook.ex integrate /:call to main page 2025-07-13 10:36:58 -05:00
user_confirmation_instructions_live.ex add user auth 2025-07-09 08:53:50 -05:00
user_confirmation_live.ex add user auth 2025-07-09 08:53:50 -05:00
user_forgot_password_live.ex add user auth 2025-07-09 08:53:50 -05:00
user_login_live.ex add user auth 2025-07-09 08:53:50 -05:00
user_registration_live.ex add callsign to users 2025-07-10 16:07:05 -05:00
user_reset_password_live.ex add user auth 2025-07-09 08:53:50 -05:00
user_settings_live.ex add callsign to users 2025-07-10 16:07:05 -05:00