* Filter entity restriction in dropdowns to match active entities

* Handle string values in entities filtering

* Check `displaywith` and `condition` in IDOR tokens

* Restrict AJAX endpoints to central interface

* Better filtering of sensitive fields

* Check for valid itemtype before creating objects

* Restrict HTTP methods allowed by Guzzle client

---------

Co-authored-by: Cédric Anne <cedric.anne@gmail.com>

Fix(Inventory) add history on Item_Devices add / update / delete when Mainasset already exist (#16750)

* Fix(inventory): add history on Item_Devices add / update / delete when Mainasset already exist

* add TU

* fix TU

* fix TU

* fix(search): contains &

* test

* fix test

* fix(search): contains &

* cedric

* cedric

* add test

* lint

* content is supposed to be HTML, criteria is sanitized

---------

Co-authored-by: Cédric Anne <cedric.anne@gmail.com>

* fix tab changes not persisting

* Update src/Ajax.php

---------

Co-authored-by: Cédric Anne <cedric.anne@gmail.com>

fixes #16381

fixes #15813

Bumps the dev-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.4.1` | `6.4.2` |
| [eslint](https://github.com/eslint/eslint) | `8.56.0` | `8.57.0` |
| [mini-css-extract-plugin](https://github.com/webpack-contrib/mini-css-extract-plugin) | `2.7.7` | `2.8.1` |
| [stylelint](https://github.com/stylelint/stylelint) | `16.2.0` | `16.2.1` |
| [terser](https://github.com/terser/terser) | `5.27.0` | `5.28.1` |
| [webpack](https://github.com/webpack/webpack) | `5.90.0` | `5.90.3` |


Updates `@testing-library/jest-dom` from 6.4.1 to 6.4.2
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/jest-dom/compare/v6.4.1...v6.4.2)

Updates `eslint` from 8.56.0 to 8.57.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v8.56.0...v8.57.0)

Updates `mini-css-extract-plugin` from 2.7.7 to 2.8.1
- [Release notes](https://github.com/webpack-contrib/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack-contrib/mini-css-extract-plugin/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack-contrib/mini-css-extract-plugin/compare/v2.7.7...v2.8.1)

Updates `stylelint` from 16.2.0 to 16.2.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/stylelint/stylelint/compare/16.2.0...16.2.1)

Updates `terser` from 5.27.0 to 5.28.1
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/compare/v5.27.0...v5.28.1)

Updates `webpack` from 5.90.0 to 5.90.3
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](https://github.com/webpack/webpack/compare/v5.90.0...v5.90.3

)

---
updated-dependencies:
- dependency-name: "@testing-library/jest-dom"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: mini-css-extract-plugin
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: stylelint
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: terser
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps the dev-dependencies group with 3 updates: [phpstan/phpstan](https://github.com/phpstan/phpstan), [squizlabs/php_codesniffer](https://github.com/PHPCSStandards/PHP_CodeSniffer) and [symfony/http-client](https://github.com/symfony/http-client).


Updates `phpstan/phpstan` from 1.10.57 to 1.10.59
- [Release notes](https://github.com/phpstan/phpstan/releases)
- [Changelog](https://github.com/phpstan/phpstan/blob/1.11.x/CHANGELOG.md)
- [Commits](https://github.com/phpstan/phpstan/compare/1.10.57...1.10.59)

Updates `squizlabs/php_codesniffer` from 3.8.1 to 3.9.0
- [Release notes](https://github.com/PHPCSStandards/PHP_CodeSniffer/releases)
- [Changelog](https://github.com/PHPCSStandards/PHP_CodeSniffer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/PHPCSStandards/PHP_CodeSniffer/compare/3.8.1...3.9.0)

Updates `symfony/http-client` from 5.4.35 to 5.4.36
- [Release notes](https://github.com/symfony/http-client/releases)
- [Changelog](https://github.com/symfony/http-client/blob/7.0/CHANGELOG.md)
- [Commits](https://github.com/symfony/http-client/compare/v5.4.35...v5.4.36

)

---
updated-dependencies:
- dependency-name: phpstan/phpstan
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: squizlabs/php_codesniffer
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: symfony/http-client
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

fixes #16560 

fixes #16259

fixes #16561