4 Commits

Include renames

Author	SHA1	Message	Date
bvandeusenandClaude Opus 5.5	a775882bd4	test(docker): a plugin template can take its own name; the overview's assertions follow its new tables (#5299, #5302) ... render_plugin_template's first three arguments are positional-only, so the service page's own `name` reaches the template. The overview names a service rather than its replica containers, and a stack chip keeps the search it was clicked under. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-07 20:11:46 -04:00
bvandeusenandClaude Opus 5.5	6caf737917	test: render plugin templates through render_template with the plugin's folder in front (#5122) ... Calling app.update_template_context directly failed in CI (run 8386: "missing 1 required positional argument: 'context'"). Rather than reproduce Quart's render path, the helper puts the plugin's template folder ahead of the app's loader for the one render and calls quart.render_template, which supplies the request context as it does for every page. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 18:06:04 -04:00
bvandeusenandClaude Opus 5.5	2a3af60e99	test(hosts): render the host_agent fragments whether or not the plugin is enabled (#5122) ... The unit app does not register plugin blueprints, so render_template could not find _host_vitals.html or _host_metrics.html (TemplateNotFound, CI run 8384). tests/_templates.render_plugin_template renders a plugin's template through the app's own Jinja environment and request context, with the plugin's template folder ahead of the app's loader. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 18:03:17 -04:00
bvandeusenandClaude Opus 5.5	f47fc23265	fix(ui): delete prompts use data-confirm, so a quote in a name no longer runs script (#5099) ... #5099 "A name containing a quote runs script when an admin clicks Delete". Inline handlers like onclick="return confirm('Delete {{ rule.name }}?')" are HTML-decoded before the JavaScript is parsed, so autoescaping did not stop a name such as x');fetch(…);// from running. - Every prompt (22 handlers, plus the docker prune and token revoke ones) is now data-confirm="…", read through dataset by one submit listener in base.html; nothing rendered is parsed as JavaScript. - The remaining inline handlers take integers only (|int), and the time range buttons pass this.dataset.range. - tests/test_inline_handlers.py fails on any {{ }} in an inline handler that is not |int, with a self-test; tests/_templates.py is the one template walker the template guards now share. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-06 14:30:13 -04:00