chore: reconcile lockfiles for typescript 5.8.3 with latest main deps

Author: LimitlessGreen

Backend/build.gradle.kts

@@ -2,7 +2,7 @@ plugins {
     kotlin("jvm") version "2.2.0" apply true
     kotlin("plugin.spring") version "2.2.0" apply true
     kotlin("plugin.jpa") version "2.1.10" apply true
-    id("org.springframework.boot") version "3.5.4"
+    id("org.springframework.boot") version "3.5.6"
     id("io.spring.dependency-management") version "1.1.7"
     id("com.netflix.dgs.codegen") version "8.1.1"
     id("org.graalvm.buildtools.native") version "0.11.0"
@@ -47,8 +47,8 @@ dependencies {
     implementation("com.graphql-java:graphql-java-extended-scalars")
 
     // Web & UI
-    implementation("org.webjars.npm:htmx.org:2.0.6")
-    implementation("org.webjars.npm:alpinejs:3.14.9")
+    implementation("org.webjars.npm:htmx.org:2.0.7")
+    implementation("org.webjars.npm:alpinejs:3.15.0")
     implementation("nz.net.ultraq.thymeleaf:thymeleaf-layout-dialect")
 
     // Utilities

Backend/src/main/resources/templates/images/list.html

@@ -305,6 +305,21 @@ <h5 class="modal-title">Edit OS Image</h5>
         }
 
         // Aktualisiert die entsprechende Tabellenzeile
+        // Helper function to escape HTML special characters
+        function escapeHtml(str) {
+            if (typeof str !== 'string') {
+                if (str === undefined || str === null) return '';
+                str = String(str);
+            }
+            return str
+                .replace(/&/g, '&amp;')
+                .replace(/</g, '&lt;')
+                .replace(/>/g, '&gt;')
+                .replace(/"/g, '&quot;')
+                .replace(/'/g, '&#39;')
+                .replace(/`/g, '&#96;');
+        }
+
         function updateTableRow(image) {
             let row = document.querySelector(`tr[data-id="${image.id}"]`);
             if (row) {
@@ -342,24 +357,24 @@ <h5 class="modal-title">Edit OS Image</h5>
                 // Erstelle die Zellen – hier ein Beispiel
                 row.innerHTML = `
             <td>
-                <img src="${ image.icon.startsWith('http') ? image.icon : `/images/icons/${image.icon}` }" alt="icon" width="40" height="40" loading="lazy">
+                <img src="${ image.icon.startsWith('http') ? escapeHtml(image.icon) : `/images/icons/${escapeHtml(image.icon)}` }" alt="icon" width="40" height="40" loading="lazy">
             </td>
-            <td>${image.name}</td>
-            <td>${image.description}</td>
-            <td>${image.category?.name || 'No Category'}</td>
+            <td>${escapeHtml(image.name)}</td>
+            <td>${escapeHtml(image.description)}</td>
+            <td>${image.category && image.category.name ? escapeHtml(image.category.name) : 'No Category'}</td>
             <td class="text-center">
                 <div class="form-check form-switch">
-                    <input class="form-check-input status-toggle" type="checkbox" role="switch" ${ image.isEnabled ? 'checked' : '' } data-id="${image.id}" onclick="event.stopPropagation(); updateStatus(this);">
+                    <input class="form-check-input status-toggle" type="checkbox" role="switch" ${ image.isEnabled ? 'checked' : '' } data-id="${escapeHtml(image.id)}" onclick="event.stopPropagation(); updateStatus(this);">
                 </div>
             </td>
             <td class="text-center">
                 <span class="badge ${ image.isAvailable ? 'bg-success' : 'bg-secondary' }">${ image.isAvailable ? 'Yes' : 'No' }</span>
             </td>
-            <td class="text-center">${image.redirectsCount}</td>
+            <td class="text-center">${escapeHtml(image.redirectsCount)}</td>
             <td class="text-center">
                 <form action="/admin/images/delete" method="post" class="d-inline" onsubmit="return confirm('Are you sure you want to delete?');">
-                    <input type="hidden" name="id" value="${image.id}">
-                    <input type="hidden" name="_csrf" value="${document.querySelector('input[name="_csrf"]').value}">
+                    <input type="hidden" name="id" value="${escapeHtml(image.id)}">
+                    <input type="hidden" name="_csrf" value="${escapeHtml(document.querySelector('input[name="_csrf"]').value)}">
                     <button type="submit" class="btn btn-sm btn-danger">
                         <i class="bi bi-trash"></i>
                     </button>

Backend/src/test/kotlin/org/openhdfpv/angularbackend/OpenHdBackendApplicationTests.kt

@@ -2,8 +2,10 @@ package org.openhdfpv.angularbackend
 
 import org.junit.jupiter.api.Test
 import org.springframework.boot.test.context.SpringBootTest
+import org.springframework.test.context.ActiveProfiles
 
 @SpringBootTest
+@ActiveProfiles("test")
 class OpenHdBackendApplicationTests {
 
     @Test

Backend/src/test/resources/application-test.properties

@@ -0,0 +1,16 @@
+spring.datasource.url=jdbc:h2:mem:testdb;MODE=PostgreSQL;DB_CLOSE_DELAY=-1
+spring.datasource.username=sa
+spring.datasource.password=
+spring.datasource.driver-class-name=org.h2.Driver
+spring.jpa.hibernate.ddl-auto=create-drop
+spring.flyway.enabled=false
+spring.jpa.database-platform=org.hibernate.dialect.H2Dialect
+spring.jpa.generate-ddl=true
+spring.jpa.defer-datasource-initialization=true
+spring.sql.init.mode=never
+spring.jpa.show-sql=false
+logging.level.org.flywaydb=OFF
+
+# JWT Testwerte
+jwt.secret=test-test-test-test-test-test-test-test-test-test-test-test
+jwt.expiration=3600000

Frontend/package-lock.json

@@ -30,13 +30,13 @@
     "@ng-bootstrap/ng-bootstrap": "19.0.1",
     "@popperjs/core": "^2.11.8",
     "apollo-angular": "^11.0.0",
-    "bootstrap": "^5.3.7",
+    "bootstrap": "^5.3.8",
     "bootstrap-icons": "1.11.3",
     "express": "^4.21.2",
     "graphql": "^16.11.0",
     "rxjs": "~7.8.2",
     "tslib": "^2.8.1",
-    "zone.js": "~0.15.0"
+    "zone.js": "~0.15.1"
   },
   "devDependencies": {
     "@angular/build": "^20.0.5",