@oneuptime/common 10.0.35 → 10.0.37

package/Server/Types/Markdown.ts

@@ -79,9 +79,6 @@ export default class Markdown {
     markdown: string,
     contentType: MarkdownContentType,
   ): Promise<string> {
-    // Basic sanitization: neutralize script tags but preserve markdown syntax like '>' for blockquotes.
-    markdown = markdown.replace(/<script/gi, "&lt;script");
-
     let renderer: Renderer | null = null;
 
     if (contentType === MarkdownContentType.Blog) {
@@ -96,6 +93,17 @@ export default class Markdown {
       renderer = this.getEmailRenderer();
     }
 
+    /*
+     * Escape raw HTML tokens in the markdown source to prevent XSS.
+     * This only affects raw HTML that users type directly (e.g. <img onerror=...>),
+     * not HTML generated by the renderer methods (headings, paragraphs, etc.).
+     */
+    if (renderer) {
+      renderer.html = (html: string): string => {
+        return Markdown.escapeHtml(html);
+      };
+    }
+
     const htmlBody: string = await marked(markdown, {
       renderer: renderer,
     });

package/Server/Utils/Greenlock/Greenlock.ts

@@ -321,6 +321,7 @@ export default class GreenlockUtil {
       }
     } catch (e) {
       logger.error(`Error ordering certificate for domain: ${data.domain}`);
+      logger.error(e);
 
       if (e instanceof Exception) {
         throw e;

package/Server/Utils/Monitor/MonitorCriteriaEvaluator.ts

@@ -447,7 +447,10 @@ ${contextBlock}
       }
     }
 
-    if (input.monitor.monitorType === MonitorType.Metrics) {
+    if (
+      input.monitor.monitorType === MonitorType.Metrics ||
+      input.monitor.monitorType === MonitorType.Kubernetes
+    ) {
       const metricMonitorResult: string | null =
         await MetricMonitorCriteria.isMonitorInstanceCriteriaFilterMet({
           dataToProcess: input.dataToProcess,

package/Types/Code/CodeType.ts

@@ -6,7 +6,7 @@ enum CodeType {
   Markdown = "markdown",
   SQL = "sql",
   Text = "text",
-  // TODO add more mime types.
+  YAML = "yaml",
 }
 
 export default CodeType;

package/Types/Metrics/MetricQueryConfigData.ts

@@ -16,4 +16,5 @@ export default interface MetricQueryConfigData {
   metricQueryData: MetricQueryData;
   getSeries?: ((data: AggregatedModel) => ChartSeries) | undefined;
   chartType?: MetricChartType | undefined;
+  yAxisValueFormatter?: ((value: number) => string) | undefined;
 }

package/Types/Monitor/CriteriaFilter.ts

@@ -226,6 +226,25 @@ export class CriteriaFilterUtil {
     ];
   }
 
+  public static getInverseFilterType(filterType: FilterType): FilterType {
+    switch (filterType) {
+      case FilterType.GreaterThan:
+        return FilterType.LessThanOrEqualTo;
+      case FilterType.LessThan:
+        return FilterType.GreaterThanOrEqualTo;
+      case FilterType.GreaterThanOrEqualTo:
+        return FilterType.LessThan;
+      case FilterType.LessThanOrEqualTo:
+        return FilterType.GreaterThan;
+      case FilterType.EqualTo:
+        return FilterType.NotEqualTo;
+      case FilterType.NotEqualTo:
+        return FilterType.EqualTo;
+      default:
+        return filterType;
+    }
+  }
+
   public static isEvaluateOverTimeFilter(checkOn: CheckOn): boolean {
     return (
       checkOn === CheckOn.ResponseStatusCode ||