fix(jans-cli-tui): remove filePath when putting asset

[devrimyatar]

Closes #10074

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The pull request focuses on improving the security and reliability of the asset management functionality in the Jans CLI TUI application by removing potentially sensitive information, implementing additional checks and validations, and adding a confirmation dialog for deleting assets.

Expand for full summary

Summary:

The changes in this pull request are focused on improving the security and reliability of the asset management functionality in the Jans CLI TUI (Text-based User Interface) application. The key changes include:

1. Removing potentially sensitive information, such as the 'document' and 'filePath' keys, from the form data before creating the form_data dictionary. This is a good security practice to minimize the risk of inadvertently exposing sensitive data.

2. Implementing additional checks and validations in the edit_asset function to ensure that the file type is supported by the configured asset directory mappings and that the "Description" and "File Name" fields are not empty. These checks help to prevent the introduction of unsupported file types or incomplete asset information, which could potentially lead to security issues.

3. Adding a delete_asset function that includes a confirmation dialog to ensure that the user intends to delete the asset. This is a good security practice to prevent accidental or unauthorized deletion of assets, which could lead to data loss or other security issues.

Files Changed:

• jans-cli-tui/cli_tui/plugins/130_assets/main.py: This file contains the changes related to the asset management functionality in the Jans CLI TUI application. The changes include the removal of potentially sensitive information from the form data, the addition of checks and validations in the edit_asset function, and the implementation of a confirmation dialog in the delete_asset function.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarcloud]

Quality Gate passed for 'jans-cli'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud