SSH Resource Configuration form XSS Bug

[zacsmits]

Describe the bug

The 'SSH' Resource configuration form is susceptible to XSS via the 'Resource Name' parameter

To Reproduce

POC: Create a SSH resource with the name: "><script>alert("TEST");</script>"
Click on the resource in the Resources list menu, and observe the alert.

Expected behavior

Resource Name field should be validated

Screenshots

If applicable, add screenshots to help explain your problem.

Your Environment

Include as many relevant details about the environment you experienced the problem in.

• Icinga DB Web version (System - About): 1.0.2
• Icinga Web 2 version (System - About): 2.11.2
• Web browser: Chrome, Firefox
• Icinga 2 version (icinga2 --version): 2.13.6
• Icinga DB version (icingadb --version): 1.0.0
• PHP version used (php --version): 7.4.3
• Server operating system and version: Ubuntu 20.04

Additional context

Add any other context about the problem here.