towerops/lib/towerops_web/controllers/api/v1
Graham McIntire fb1d4c564f
security: fix critical vulnerabilities and atom exhaustion risks
Critical fixes:
- Add [:safe] option to binary_to_term to prevent RCE attacks
- Implement whitelist validation for String.to_atom conversions
- Add input validation before String.to_existing_atom usage

Changes:
- MIB compiler and cache: Use safe binary deserialization
- SNMP contexts: Whitelist protocol, device type, and source atoms
- API controllers: Validate error message keys before atom conversion
- Reduce function nesting to comply with Credo standards

All 6,145 tests passing with zero Credo issues.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-08 10:30:30 -06:00
..
devices_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00
geoip_controller.ex support prod ip db import 2026-01-28 14:03:35 -06:00
mib_controller.ex live device polling 2026-02-01 13:19:32 -06:00
sites_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00