Affected by GO-2026-4637 and 4 other vulnerabilities

GO-2026-4637: WeKnora has Broken Access Control - Cross-Tenant Data Exposure in github.com/Tencent/WeKnora

GO-2026-4638: WeKnora Vulnerable to Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection in github.com/Tencent/WeKnora

GO-2026-4640: WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning in github.com/Tencent/WeKnora

GO-2026-4641: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool in github.com/Tencent/WeKnora

GO-2026-4643: WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources in github.com/Tencent/WeKnora

storageallowlist

package

v0.8.3 Latest Latest Go to latest Published: Oct 14, 2026 License: Apache-2.0, MIT Imports: 2 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/Tencent/WeKnora

Links

Open Source Insights

Documentation ¶

Constants ¶

View Source

const AllowListEnv = "STORAGE_ALLOW_LIST"

Variables ¶

This section is empty.

Functions ¶

func AllowedList ¶

func AllowedList() []string

AllowedList returns allowed providers in canonical order.

func AllowedMap ¶

func AllowedMap() map[string]bool

AllowedMap returns which providers are permitted by STORAGE_ALLOW_LIST.

func FirstAllowed ¶

func FirstAllowed() string

FirstAllowed returns the first supported provider allowed by STORAGE_ALLOW_LIST.

func IsAllowed ¶

func IsAllowed(provider string) bool

IsAllowed reports whether provider is permitted. Empty provider is treated as allowed.

func Supported ¶

func Supported() []string

Supported returns the canonical storage provider names in display order.

Types ¶

This section is empty.

Source Files ¶

View all Source files

allowlist.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL