Jing Chen

html_start_box should accept divId as a param for 'return_to' anchor of other function

2

Related #2347: Currently, html_header_sort, html_header_sort_checkbox, html_nav_bar support 'return_to' for specified table html content replacement now. But div id is not return by html_start_box. Feature request: html_start_box function should accept divId...

Found five hooks API missed in doc, and one is invalid

3

In [Plugin-Hook-API-Ref](https://github.com/Cacti/documentation/blob/develop/Plugin-Hook-API-Ref.md) * Missed: device_threshold_autocreate, expand_title, is_device_in_maintenance, custom_2fa_login, utilities_tab * Invalid: report_filter link is broken. Also, report_filter is not found in any code(both of 1.2.x and develop branch) As soon,...

Security[CSRF]: thold.php use the value of the "Referer" header without validation

2

**Describe the bug** It may be possible to steal or manipulate customer session and cookies, which might be used toimpersonate a legitimate user, allowing the hacker to view or alter...