[adulau]

Adds an Export data page for running active export modules against uploaded MISP JSON or events selected from the CIRCL OSINT feed, without requiring a MISP instance.

• Reuses module options, saved configuration, query workers, and session history. Supports standard and legacy event layouts and collections where advertised by the module.
• Adds searchable, paginated feed selection, escaped text previews, binary output handling, and downloads of the original generated files.
• Requires admin login for export execution and result/download access when ADMIN_PASSWORD is configured, including live and previously saved results. Export modules cannot bypass this policy through the generic module endpoint.
• Uses login/password placeholders for FireSIGHT scripts instead of saved or submitted credentials; credentials are added after download. Export execution settings are excluded from browser-session trees and saved history.
• Bounds uploaded input to 20 MiB and extends the existing Flask-compatible request parser limits to export requests. Feed requests use an explicit source registry, bounded responses and timeouts, and reject redirects.

Validation:

• All 74 website checks pass locally, including browser workflows, responsive layouts, accessibility scans, and wheel packaging.
• All 23 import/export checks pass locally with Flask 3.0.3 and Werkzeug 3.0.6; CI now covers exports in the compatibility job.
• Verified a live CIRCL feed event with both liteexport and cef_export.

No new production dependencies or database migrations are required.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-29T08:15:20.729303Z	b370249	PR opened
🔒 Security Review	✅ Completed 2026-10-29T08:18:01.597837Z	b370249	PR opened

Security findings

Advisory findings (1)

• 🟡 Require authorization before running credentialed exports · High

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

🛡️ Codex Security Review · Automatically triggered

Here are some automated security review suggestions for this pull request.

Reviewed commit: b370249caf

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.