Skip to content

Aggiunto modulo Ubicazioni#1689

Closed
maulapi wants to merge 1 commit into
devcode-it:masterfrom
maulapi:master
Closed

Aggiunto modulo Ubicazioni#1689
maulapi wants to merge 1 commit into
devcode-it:masterfrom
maulapi:master

Conversation

@maulapi
Copy link
Copy Markdown
Contributor

@maulapi maulapi commented Jul 27, 2025

Descrizione

Con questo modulo si possono gestire le ubicazioni/posizioni degli articoli di magazzino

Tipologia

Rimuovi le opzioni non rilevanti.

  • Bug fix (cambiamenti minori che risolvono una issue)
  • Nuova funzionalità (cambiamenti minori che aggiungono una nuova funzionalità)
  • Cambiamento maggiore (fix o funzionalità che richiede una revisione prima di essere pubblicata)
  • Questo cambiamenti richiede un aggiornamento della documentazione

Checklist

  • Il codice segue le linee guida del progetto
  • Ho commentato il codice, in particolare nelle parti più complesse
  • Ho aggiornato di conseguenza la documentazione (se presente)
  • Il codice non genera warnings

if(!(cookie.name in client.cookies)) {
client.cookies[cookie.name] = {};
}
client.cookies[cookie.name][cookie.path] = cookie;

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
* @return the trimmed string.
*/
var _trimString = function(str) {
return str.replace(/^\s*/, '').replace(/\s*$/, '');

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
var rCRLF = /\r?\n/;
var match;
while(true) {
match = rMessage.exec(str);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of '\t\n\n\t'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN ' and with many repetitions of '-----BEGIN '.
This
regular expression
that depends on
library input
may run slow on strings starting with '-----BEGIN -----' and with many repetitions of ' ----- '.
This [regular expression
var li = 0;
while(match && li < lines.length) {
// get line, trim any rhs whitespace
var line = lines[li].replace(/\s+$/, '');

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of ' '.
}

// parse header
match = line.match(rHeader);

Check failure

Code scanning / CodeQL

Polynomial regular expression used on uncontrolled data High

This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.
This
regular expression
that depends on
library input
may run slow on strings with many repetitions of '!'.

/* open the cache for this password and iteration count */
cp = cache[password] = cache[password] || {};
c = cp[iter] = cp[iter] || { firstSalt: (obj.salt && obj.salt.length) ?

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.

salt = (obj.salt === undefined) ? c.firstSalt : obj.salt;

c[salt] = c[salt] || sjcl.misc.pbkdf2(password, salt, obj.iter);

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.

for (i=0; i<jsTemp.length; i++) {
j = jsTemp[i];
delete cbs[j];

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
isReady:function(a){a=this.T[void 0!==a?a:this.M];return this.o&&this.o>=a?this.m[0]>this.ba&&(new Date).valueOf()>this.Z?this.J|this.I:this.I:this.f>=a?this.J|this.u:this.u},getProgress:function(a){a=this.T[a?a:this.M];return this.o>=a?1:this.f>a?1:this.f/a},startCollectors:function(){if(!this.D){this.a={loadTimeCollector:B(this,this.ma),mouseCollector:B(this,this.oa),keyboardCollector:B(this,this.la),accelerometerCollector:B(this,this.ea),touchCollector:B(this,this.qa)};if(window.addEventListener)window.addEventListener("load",
this.a.loadTimeCollector,!1),window.addEventListener("mousemove",this.a.mouseCollector,!1),window.addEventListener("keypress",this.a.keyboardCollector,!1),window.addEventListener("devicemotion",this.a.accelerometerCollector,!1),window.addEventListener("touchmove",this.a.touchCollector,!1);else if(document.attachEvent)document.attachEvent("onload",this.a.loadTimeCollector),document.attachEvent("onmousemove",this.a.mouseCollector),document.attachEvent("keypress",this.a.keyboardCollector);else throw new sjcl.exception.bug("can't attach event");
this.D=!0}},stopCollectors:function(){this.D&&(window.removeEventListener?(window.removeEventListener("load",this.a.loadTimeCollector,!1),window.removeEventListener("mousemove",this.a.mouseCollector,!1),window.removeEventListener("keypress",this.a.keyboardCollector,!1),window.removeEventListener("devicemotion",this.a.accelerometerCollector,!1),window.removeEventListener("touchmove",this.a.touchCollector,!1)):document.detachEvent&&(document.detachEvent("onload",this.a.loadTimeCollector),document.detachEvent("onmousemove",
this.a.mouseCollector),document.detachEvent("keypress",this.a.keyboardCollector)),this.D=!1)},addEventListener:function(a,b){this.K[a][this.ga++]=b},removeEventListener:function(a,b){var c,d,e=this.K[a],f=[];for(d in e)e.hasOwnProperty(d)&&e[d]===b&&f.push(d);for(c=0;c<f.length;c++)d=f[c],delete e[d]},la:function(){C(this,1)},oa:function(a){var b,c;try{b=a.x||a.clientX||a.offsetX||0,c=a.y||a.clientY||a.offsetY||0}catch(d){c=b=0}0!=b&&0!=c&&this.addEntropy([b,c],2,"mouse");C(this,0)},qa:function(a){a=

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
b.mode&&sjcl.arrayBuffer&&sjcl.arrayBuffer.ccm&&b.ct instanceof ArrayBuffer?sjcl.arrayBuffer.ccm.decrypt(g,b.ct,b.iv,b.tag,f,b.ts):sjcl.mode[b.mode].decrypt(g,b.ct,b.iv,f,b.ts);e.g(d,b);d.key=a;return 1===c.raw?f:sjcl.codec.utf8String.fromBits(f)},decrypt:function(a,b,c,d){var e=sjcl.json;return e.ia(a,e.decode(b),c,d)},encode:function(a){var b,c="{",d="";for(b in a)if(a.hasOwnProperty(b)){if(!b.match(/^[a-z0-9]+$/i))throw new sjcl.exception.invalid("json encode: invalid property name");c+=d+'"'+
b+'":';d=",";switch(typeof a[b]){case "number":case "boolean":c+=a[b];break;case "string":c+='"'+escape(a[b])+'"';break;case "object":c+='"'+sjcl.codec.base64.fromBits(a[b],0)+'"';break;default:throw new sjcl.exception.bug("json encode: unsupported type");}}return c+"}"},decode:function(a){a=a.replace(/\s/g,"");if(!a.match(/^\{.*\}$/))throw new sjcl.exception.invalid("json decode: this isn't json!");a=a.replace(/^\{|\}$/g,"").split(/,/);var b={},c,d;for(c=0;c<a.length;c++){if(!(d=a[c].match(/^\s*(?:(["']?)([a-z][a-z0-9]*)\1)\s*:\s*(?:(-?\d+)|"([a-z0-9+\/%*_.@=\-]*)"|(true|false))$/i)))throw new sjcl.exception.invalid("json decode: this isn't json!");
null!=d[3]?b[d[2]]=parseInt(d[3],10):null!=d[4]?b[d[2]]=d[2].match(/^(ct|adata|salt|iv)$/)?sjcl.codec.base64.toBits(d[4]):unescape(d[4]):null!=d[5]&&(b[d[2]]="true"===d[5])}return b},g:function(a,b,c){void 0===a&&(a={});if(void 0===b)return a;for(var d in b)if(b.hasOwnProperty(d)){if(c&&void 0!==a[d]&&a[d]!==b[d])throw new sjcl.exception.invalid("required parameter overridden");a[d]=b[d]}return a},sa:function(a,b){var c={},d;for(d in a)a.hasOwnProperty(d)&&a[d]!==b[d]&&(c[d]=a[d]);return c},ra:function(a,
b){var c={},d;for(d=0;d<b.length;d++)void 0!==a[b[d]]&&(c[b[d]]=a[b[d]]);return c}};sjcl.encrypt=sjcl.json.encrypt;sjcl.decrypt=sjcl.json.decrypt;sjcl.misc.pa={};sjcl.misc.cachedPbkdf2=function(a,b){var c=sjcl.misc.pa,d;b=b||{};d=b.iter||1E3;c=c[a]=c[a]||{};d=c[d]=c[d]||{firstSalt:b.salt&&b.salt.length?b.salt.slice(0):sjcl.random.randomWords(2,0)};c=void 0===b.salt?d.firstSalt:b.salt;d[c]=d[c]||sjcl.misc.pbkdf2(a,c,b.iter);return{key:d[c].slice(0),salt:c.slice(0)}};

Check warning

Code scanning / CodeQL

Prototype-polluting assignment Medium

This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
This assignment may alter Object.prototype if a malicious '__proto__' string is injected from
library input
.
@maulapi
Copy link
Copy Markdown
Contributor Author

maulapi commented Jul 27, 2025

Ho aggiunto il modulo Ubicazioni ma non so perché sono saltati fuori centinaia di files modificati. Che ho sbagliato?
Note: le queries dentro il file .sql vanno inserite nel relativo file di update. Il file dopo si può eliminare.
Inoltre c'è una modifica anche nel file select.php dentro a modules/articoli/ajax che spero sia arrivata con la presente issue

@loviuz
Copy link
Copy Markdown
Contributor

loviuz commented Jul 27, 2025

Ciao @maulapi, grazie mille!

Molto strano che siano stati caricati tutti quei file. Ho guardato il tuo fork: ha commit fino a 2 giorni fa e poi il tuo, per cui dovrebbe essere abbastanza aggiornato. Sei sicuro di aver lavorato su file del fork e non averci copiato dentro file di una release magari? Anche il file index.php che è quello del login risulta cambiato, però è da un bel po' che non lo modifichiamo... Puoi ricontrollare per sicurezza? Sennò proviamo a fare diversamente, però dovremo modificare il tuo branch per fare un merge pulito.

@maulapi
Copy link
Copy Markdown
Contributor Author

maulapi commented Jul 28, 2025

Ciao @loviuz, sicuramente è andata come dici te. Posso cancellare tutta la Pull request e riprovarci seguendo i tuoi consigli?

@loviuz
Copy link
Copy Markdown
Contributor

loviuz commented Jul 28, 2025

Se puoi si, grazie 🙏

@maulapi maulapi closed this Jul 28, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants