CyberMind-FR
e58f479cd4
Add detection patterns for latest actively exploited vulnerabilities: - CVE-2025-55182 (React2Shell, CVSS 10.0) - CVE-2025-8110 (Gogs RCE), CVE-2025-53770 (SharePoint) - CVE-2025-52691 (SmarterMail), CVE-2025-40551 (SolarWinds) - CVE-2024-47575 (FortiManager), CVE-2024-21887 (Ivanti) - CVE-2024-3400, CVE-2024-0012, CVE-2024-9474 (PAN-OS) New attack categories based on OWASP Top 10 2025: - HTTP Request Smuggling (TE.CL/CL.TE conflicts) - AI/LLM Prompt Injection (ChatML, instruction markers) - WAF Bypass techniques (Unicode normalization, double encoding) - Supply Chain attacks (CI/CD poisoning, dependency confusion) - Extended SSTI (Jinja2, Freemarker, Velocity, Thymeleaf) - API Abuse (BOLA/IDOR, mass assignment) CrowdSec scenarios split into 11 separate files for reliability. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
486 lines
15 KiB
JavaScript
486 lines
15 KiB
JavaScript
'use strict';
|
||
'require view';
|
||
'require ui';
|
||
'require system-hub/api as API';
|
||
'require secubox-theme/theme as Theme';
|
||
'require system-hub/theme-assets as ThemeAssets';
|
||
'require system-hub/nav as HubNav';
|
||
'require secubox-portal/header as SbHeader';
|
||
'require secubox/kiss-theme';
|
||
|
||
var shLang = (typeof L !== 'undefined' && L.env && L.env.lang) ||
|
||
(document.documentElement && document.documentElement.getAttribute('lang')) ||
|
||
(navigator.language ? navigator.language.split('-')[0] : 'en');
|
||
Theme.init({ language: shLang });
|
||
|
||
return view.extend({
|
||
settings: null,
|
||
fieldRefs: null,
|
||
|
||
load: function() {
|
||
return API.getSettings();
|
||
},
|
||
|
||
render: function(data) {
|
||
this.settings = data || {};
|
||
this.fieldRefs = {};
|
||
|
||
var content = [
|
||
E('link', { 'rel': 'stylesheet', 'href': L.resource('secubox-theme/secubox-theme.css') }),
|
||
ThemeAssets.stylesheet('common.css'),
|
||
ThemeAssets.stylesheet('dashboard.css'),
|
||
HubNav.renderTabs('settings'),
|
||
this.renderHeader(),
|
||
this.renderGeneralSection(),
|
||
this.renderThemeSection(),
|
||
this.renderThresholdSection(),
|
||
this.renderSupportSection(),
|
||
this.renderActions()
|
||
];
|
||
|
||
return KissTheme.wrap(content, 'admin/system/hub/settings');
|
||
},
|
||
|
||
renderHeader: function() {
|
||
var general = this.settings.general || {};
|
||
var autoRefresh = this.boolValue(general.auto_refresh, true);
|
||
var healthCheck = this.boolValue(general.health_check, true);
|
||
|
||
return E('div', { 'class': 'sh-page-header sh-page-header-lite' }, [
|
||
E('div', {}, [
|
||
E('h2', { 'class': 'sh-page-title' }, [
|
||
E('span', { 'class': 'sh-page-title-icon' }, '⚙️'),
|
||
_('System Hub Preferences')
|
||
]),
|
||
E('p', { 'class': 'sh-page-subtitle' },
|
||
_('Control health checks, refresh cadence, and alert thresholds for every System Hub widget.'))
|
||
]),
|
||
E('div', { 'class': 'sh-header-meta' }, [
|
||
this.renderChip('⏱️', _('Auto refresh'), autoRefresh ? _('Enabled') : _('Disabled')),
|
||
this.renderChip('🩺', _('Health monitor'), healthCheck ? _('Active') : _('Paused')),
|
||
this.renderChip('🧪', _('Diagnostics'), _('Manual triggers'))
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderChip: function(icon, label, value) {
|
||
return E('div', { 'class': 'sh-header-chip' }, [
|
||
E('span', { 'class': 'sh-chip-icon' }, icon),
|
||
E('div', { 'class': 'sh-chip-text' }, [
|
||
E('span', { 'class': 'sh-chip-label' }, label),
|
||
E('strong', {}, value || '—')
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderGeneralSection: function() {
|
||
var general = this.settings.general || {};
|
||
var refresh = (general.refresh_interval != null) ? String(general.refresh_interval) : '30';
|
||
|
||
return E('section', { 'class': 'sh-card' }, [
|
||
E('div', { 'class': 'sh-card-header' }, [
|
||
E('div', { 'class': 'sh-card-title' }, [
|
||
E('span', { 'class': 'sh-card-title-icon' }, '🛠️'),
|
||
_('Automation & Refresh')
|
||
])
|
||
]),
|
||
E('div', { 'class': 'sh-card-body' }, [
|
||
E('div', { 'class': 'sh-settings-grid' }, [
|
||
this.renderToggle('auto_refresh', _('Auto refresh'), _('Poll services & metrics every few seconds'), this.boolValue(general.auto_refresh, true), '♻️'),
|
||
this.renderToggle('health_check', _('Health monitor'), _('Run background probes to populate the Health tab'), this.boolValue(general.health_check, true), '🩺'),
|
||
this.renderToggle('debug_mode', _('Debug mode'), _('Surface extra logs and RPC payloads (development only)'), this.boolValue(general.debug_mode, false), '🐛')
|
||
]),
|
||
E('div', { 'class': 'sh-settings-grid sh-settings-grid--compact', 'style': 'margin-top: 20px;' }, [
|
||
this.renderSelect('refresh_interval', _('Refresh cadence'), [
|
||
{ value: '15', label: _('Every 15 seconds') },
|
||
{ value: '30', label: _('Every 30 seconds') },
|
||
{ value: '60', label: _('Every minute') },
|
||
{ value: '120', label: _('Every 2 minutes') },
|
||
{ value: '0', label: _('Manual refresh only') }
|
||
], refresh),
|
||
this.renderNumber('log_retention', _('Log retention (days)'), general.log_retention || 30, 1, 365)
|
||
])
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderThresholdSection: function() {
|
||
var th = this.settings.thresholds || {};
|
||
|
||
return E('section', { 'class': 'sh-card' }, [
|
||
E('div', { 'class': 'sh-card-header' }, [
|
||
E('div', { 'class': 'sh-card-title' }, [
|
||
E('span', { 'class': 'sh-card-title-icon' }, '🚨'),
|
||
_('Alert thresholds')
|
||
]),
|
||
E('div', { 'class': 'sh-card-subtitle' }, _('Define warning/critical limits used by Health dashboards.'))
|
||
]),
|
||
E('div', { 'class': 'sh-card-body' }, [
|
||
E('div', { 'class': 'sh-threshold-grid' }, [
|
||
this.renderThresholdRow('cpu', _('CPU usage (%)'), th.cpu_warning || 80, th.cpu_critical || 95),
|
||
this.renderThresholdRow('mem', _('Memory usage (%)'), th.mem_warning || 80, th.mem_critical || 95),
|
||
this.renderThresholdRow('disk', _('Disk usage (%)'), th.disk_warning || 80, th.disk_critical || 95),
|
||
this.renderThresholdRow('temp', _('Temperature (°C)'), th.temp_warning || 70, th.temp_critical || 85)
|
||
])
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderSupportSection: function() {
|
||
var support = this.settings.support || {};
|
||
var upload = this.settings.upload || {};
|
||
|
||
return E('section', { 'class': 'sh-card' }, [
|
||
E('div', { 'class': 'sh-card-header' }, [
|
||
E('div', { 'class': 'sh-card-title' }, [
|
||
E('span', { 'class': 'sh-card-title-icon' }, '🤝'),
|
||
_('Support & export')
|
||
])
|
||
]),
|
||
E('div', { 'class': 'sh-card-body' }, [
|
||
E('div', { 'class': 'sh-support-grid' }, [
|
||
E('div', { 'class': 'sh-support-card' }, [
|
||
E('div', { 'class': 'sh-support-label' }, _('Provider')),
|
||
E('strong', {}, support.provider || _('Unknown')),
|
||
E('div', { 'class': 'sh-support-desc' }, support.email || '')
|
||
]),
|
||
E('div', { 'class': 'sh-support-card' }, [
|
||
E('div', { 'class': 'sh-support-label' }, _('Documentation')),
|
||
E('a', { 'href': support.docs || '#', 'target': '_blank', 'rel': 'noreferrer' }, support.docs || _('Unavailable'))
|
||
]),
|
||
E('div', { 'class': 'sh-support-card' }, [
|
||
E('div', { 'class': 'sh-support-label' }, _('Auto upload')),
|
||
E('strong', {}, this.boolValue(upload.auto_upload, false) ? _('Enabled') : _('Disabled')),
|
||
E('div', { 'class': 'sh-support-desc' }, upload.url || _('No endpoint configured'))
|
||
])
|
||
])
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderActions: function() {
|
||
return E('section', { 'class': 'sh-card' }, [
|
||
E('div', { 'class': 'sh-card-header' }, [
|
||
E('div', { 'class': 'sh-card-title' }, [
|
||
E('span', { 'class': 'sh-card-title-icon' }, '💾'),
|
||
_('Apply changes')
|
||
])
|
||
]),
|
||
E('div', { 'class': 'sh-card-body sh-btn-group' }, [
|
||
E('button', {
|
||
'class': 'sh-btn sh-btn-primary',
|
||
'click': L.bind(this.saveSettings, this)
|
||
}, [ '✅ ', _('Save preferences') ]),
|
||
E('button', {
|
||
'class': 'sh-btn sh-btn-secondary',
|
||
'click': L.bind(this.resetView, this)
|
||
}, [ '↺ ', _('Reset') ])
|
||
])
|
||
]);
|
||
},
|
||
|
||
renderToggle: function(key, label, desc, active, icon) {
|
||
var self = this;
|
||
var switchEl = E('div', {
|
||
'class': 'sh-toggle-switch' + (active ? ' active' : ''),
|
||
'data-key': key,
|
||
'click': function(ev) {
|
||
ev.target.classList.toggle('active');
|
||
}
|
||
});
|
||
this.fieldRefs[key] = { type: 'toggle', node: switchEl };
|
||
|
||
return E('div', { 'class': 'sh-toggle' }, [
|
||
E('div', { 'class': 'sh-toggle-info' }, [
|
||
E('span', { 'class': 'sh-toggle-icon' }, icon || '•'),
|
||
E('div', {}, [
|
||
E('div', { 'class': 'sh-toggle-label' }, label),
|
||
E('div', { 'class': 'sh-toggle-desc' }, desc)
|
||
])
|
||
]),
|
||
switchEl
|
||
]);
|
||
},
|
||
|
||
renderThemeSection: function() {
|
||
var available = Theme.availableThemes || [];
|
||
var preferred = this.readStoredTheme() || Theme.currentTheme || available[0] || 'dark';
|
||
var selectEl = E('select', {
|
||
'id': 'sh-theme-select',
|
||
'class': 'sh-select',
|
||
'change': L.bind(function(ev) {
|
||
this.previewTheme(ev.target.value);
|
||
}, this)
|
||
});
|
||
|
||
if (available.length === 0) {
|
||
available = ['dark'];
|
||
}
|
||
|
||
available.forEach(function(themeName) {
|
||
selectEl.appendChild(E('option', {
|
||
'value': themeName,
|
||
'selected': themeName === preferred
|
||
}, themeName));
|
||
});
|
||
|
||
this.themeSelect = selectEl;
|
||
|
||
return E('section', { 'class': 'sh-card' }, [
|
||
E('div', { 'class': 'sh-card-header' }, [
|
||
E('div', { 'class': 'sh-card-title' }, [
|
||
E('span', { 'class': 'sh-card-title-icon' }, '🎨'),
|
||
_('SecuBox Theme Preferences')
|
||
]),
|
||
E('div', { 'class': 'sh-card-subtitle' },
|
||
_('Pick a theme, store it locally, and ensure the UI respects your choice.'))
|
||
]),
|
||
E('div', { 'class': 'sh-card-body' }, [
|
||
E('div', { 'class': 'sh-settings-grid' }, [
|
||
E('div', {}, [
|
||
E('label', { 'for': 'sh-theme-select' }, _('Preferred theme')),
|
||
selectEl,
|
||
E('small', { 'class': 'sh-muted' },
|
||
_('Current applied theme: {theme}', { theme: Theme.currentTheme || 'dark' }))
|
||
]),
|
||
E('div', { 'class': 'sh-btn-group' }, [
|
||
E('button', {
|
||
'class': 'sh-btn sh-btn-primary',
|
||
'click': L.bind(this.applyThemePreference, this)
|
||
}, [ '💾 ', _('Save to browser') ]),
|
||
E('button', {
|
||
'class': 'sh-btn sh-btn-secondary',
|
||
'click': L.bind(this.resetThemePreference, this)
|
||
}, [ '🗑️ ', _('Reset preference') ])
|
||
])
|
||
]),
|
||
E('div', { 'class': 'sh-support-grid', 'style': 'margin-top: 18px;' }, [
|
||
E('div', { 'class': 'sh-support-card' }, [
|
||
E('div', { 'class': 'sh-support-label' }, _('localStorage value')),
|
||
E('code', {}, this.readStoredTheme() || _('(none)'))
|
||
]),
|
||
E('div', { 'class': 'sh-support-card' }, [
|
||
E('div', { 'class': 'sh-support-label' }, _('Available themes')),
|
||
E('span', {}, available.join(', '))
|
||
])
|
||
]),
|
||
E('div', { 'class': 'sh-support-card sh-theme-help' }, [
|
||
E('strong', {}, _('Troubleshooting (theme not persisting)')),
|
||
E('ol', { 'class': 'sh-theme-checklist' }, [
|
||
E('li', {}, _('Check localStorage: `localStorage.getItem(\'secubox.theme\')`')),
|
||
E('li', {}, _('Verify the theme exists in Theme.availableThemes')),
|
||
E('li', {}, _('Confirm the browser allows localStorage / site data'))
|
||
]),
|
||
E('p', { 'class': 'sh-muted' },
|
||
_('Use the buttons above to re-generate your preference if the UI resets.'))
|
||
])
|
||
])
|
||
]);
|
||
},
|
||
|
||
readStoredTheme: function() {
|
||
try {
|
||
return window.localStorage.getItem('secubox.theme');
|
||
} catch (err) {
|
||
return null;
|
||
}
|
||
},
|
||
|
||
previewTheme: function(themeName) {
|
||
if (Theme && Theme.apply) {
|
||
Theme.apply(themeName);
|
||
}
|
||
},
|
||
|
||
applyThemePreference: function() {
|
||
var theme = this.themeSelect ? this.themeSelect.value : Theme.currentTheme;
|
||
if (!theme)
|
||
return;
|
||
|
||
if (Theme && Theme.setPreferredTheme) {
|
||
Theme.setPreferredTheme(theme);
|
||
} else {
|
||
try {
|
||
window.localStorage.setItem('secubox.theme', theme);
|
||
} catch (err) {
|
||
console.warn('Unable to store theme preference:', err);
|
||
}
|
||
}
|
||
|
||
ui.addNotification(null,
|
||
E('p', {}, _('Theme preference saved to this browser.') + ' [' + theme + ']'),
|
||
'info');
|
||
},
|
||
|
||
resetThemePreference: function() {
|
||
try {
|
||
window.localStorage.removeItem('secubox.theme');
|
||
} catch (err) { /* ignore */ }
|
||
|
||
if (this.themeSelect) {
|
||
this.themeSelect.value = Theme.currentTheme || Theme.availableThemes[0] || 'dark';
|
||
}
|
||
|
||
ui.addNotification(null,
|
||
E('p', {}, _('Stored preference cleared. The default detection logic will run on next load.')),
|
||
'warning');
|
||
},
|
||
|
||
renderSelect: function(key, label, options, current) {
|
||
var select = E('select', {
|
||
'class': 'sh-input',
|
||
'change': function(ev) {
|
||
ev.target.setAttribute('data-value', ev.target.value);
|
||
}
|
||
}, options.map(function(opt) {
|
||
return E('option', {
|
||
'value': opt.value,
|
||
'selected': opt.value === current
|
||
}, opt.label);
|
||
}));
|
||
select.setAttribute('data-value', current);
|
||
this.fieldRefs[key] = { type: 'select', node: select };
|
||
|
||
return E('div', { 'class': 'sh-input-group' }, [
|
||
E('label', { 'class': 'sh-input-label' }, label),
|
||
select
|
||
]);
|
||
},
|
||
|
||
renderNumber: function(key, label, value, min, max) {
|
||
var input = E('input', {
|
||
'type': 'number',
|
||
'class': 'sh-input',
|
||
'value': value,
|
||
'min': min,
|
||
'max': max
|
||
});
|
||
this.fieldRefs[key] = { type: 'number', node: input };
|
||
|
||
return E('div', { 'class': 'sh-input-group' }, [
|
||
E('label', { 'class': 'sh-input-label' }, label),
|
||
input
|
||
]);
|
||
},
|
||
|
||
renderThresholdRow: function(prefix, label, warning, critical) {
|
||
var warnKey = prefix + '_warning';
|
||
var critKey = prefix + '_critical';
|
||
|
||
var warnInput = E('input', {
|
||
'type': 'number',
|
||
'class': 'sh-input',
|
||
'value': warning,
|
||
'min': 0,
|
||
'max': 200
|
||
});
|
||
var critInput = E('input', {
|
||
'type': 'number',
|
||
'class': 'sh-input',
|
||
'value': critical,
|
||
'min': 0,
|
||
'max': 200
|
||
});
|
||
|
||
this.fieldRefs[warnKey] = { type: 'number', node: warnInput };
|
||
this.fieldRefs[critKey] = { type: 'number', node: critInput };
|
||
|
||
return E('div', { 'class': 'sh-threshold-row' }, [
|
||
E('div', { 'class': 'sh-threshold-label' }, label),
|
||
E('div', { 'class': 'sh-threshold-inputs' }, [
|
||
E('label', {}, [
|
||
_('Warning'),
|
||
warnInput
|
||
]),
|
||
E('label', {}, [
|
||
_('Critical'),
|
||
critInput
|
||
])
|
||
])
|
||
]);
|
||
},
|
||
|
||
boolValue: function(value, fallback) {
|
||
if (value === 0 || value === '0')
|
||
return false;
|
||
if (value === 1 || value === '1')
|
||
return true;
|
||
return !!fallback;
|
||
},
|
||
|
||
collectPayload: function() {
|
||
var payload = {};
|
||
var self = this;
|
||
|
||
function readBool(key) {
|
||
var ref = self.fieldRefs[key];
|
||
return ref && ref.node.classList.contains('active') ? 1 : 0;
|
||
}
|
||
|
||
function readNumber(key) {
|
||
var ref = self.fieldRefs[key];
|
||
return ref ? parseInt(ref.node.value, 10) || 0 : 0;
|
||
}
|
||
|
||
function readSelect(key) {
|
||
var ref = self.fieldRefs[key];
|
||
return ref ? ref.node.getAttribute('data-value') || ref.node.value : '';
|
||
}
|
||
|
||
payload.auto_refresh = readBool('auto_refresh');
|
||
payload.health_check = readBool('health_check');
|
||
payload.debug_mode = readBool('debug_mode');
|
||
payload.refresh_interval = readSelect('refresh_interval');
|
||
payload.log_retention = readNumber('log_retention');
|
||
|
||
['cpu', 'mem', 'disk', 'temp'].forEach(function(prefix) {
|
||
payload[prefix + '_warning'] = readNumber(prefix + '_warning');
|
||
payload[prefix + '_critical'] = readNumber(prefix + '_critical');
|
||
});
|
||
|
||
return payload;
|
||
},
|
||
|
||
saveSettings: function(ev) {
|
||
ev && ev.preventDefault();
|
||
var payload = this.collectPayload();
|
||
|
||
ui.showModal(_('Saving preferences…'), [
|
||
E('p', {}, _('Applying thresholds and refresh cadence')),
|
||
E('div', { 'class': 'spinning' })
|
||
]);
|
||
|
||
API.saveSettings(payload).then(L.bind(function(result) {
|
||
ui.hideModal();
|
||
if (result && result.success) {
|
||
ui.addNotification(null, E('p', {}, _('Preferences saved.')), 'info');
|
||
this.reloadView();
|
||
} else {
|
||
ui.addNotification(null, E('p', {}, (result && result.error) || _('Unable to save settings')), 'error');
|
||
}
|
||
}, this)).catch(function(err) {
|
||
ui.hideModal();
|
||
ui.addNotification(null, E('p', {}, err.message || err), 'error');
|
||
});
|
||
},
|
||
|
||
resetView: function(ev) {
|
||
ev && ev.preventDefault();
|
||
this.reloadView();
|
||
},
|
||
|
||
reloadView: function() {
|
||
this.load().then(L.bind(function(data) {
|
||
var node = this.render(data);
|
||
var root = document.querySelector('.system-hub-dashboard');
|
||
if (root && root.parentNode) {
|
||
root.parentNode.replaceChild(node, root);
|
||
}
|
||
}, this));
|
||
},
|
||
|
||
handleSaveApply: null,
|
||
handleSave: null,
|
||
handleReset: null
|
||
});
|