Merge changes from private security fork (v2.15.4)#10905

Merged

julianbrost merged 17 commits into

support/2.15from

security-2.15.4

Jun 29, 2026

Commits on Jun 23, 2026

Check if client is a valid endpoint before updating CA-certificate
jschmidt-icinga
committed
ConfigWriter::EmitScope: Escape import

oxzi
authored and
jschmidt-icinga
committed
Add filter-expression permission

julianbrost
authored and
jschmidt-icinga
committed
JsonDecode: add depth limit

julianbrost
authored and
jschmidt-icinga
committed
JsonDecode: include path in JSON depth error

julianbrost
authored and
jschmidt-icinga
committed
Don't shut down JSON-RPC connection if a message fails to parse

julianbrost
authored and
jschmidt-icinga
committed
Prevent HTTP requests from creating deeply nested data structures

julianbrost
authored and
jschmidt-icinga
committed
tests: move SpawnSynchronizedCoroutine() to utils.cpp

julianbrost
authored and
jschmidt-icinga
committed
Add tests for JsonDecode depth limit in combination with coroutine stacks

julianbrost
authored and
jschmidt-icinga
committed
Use protected stack for new-style Boost.Asio coroutines

julianbrost
authored and
jschmidt-icinga
committed

Commits on Jun 24, 2026