GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

sql

package

v0.6.23 Latest Latest Go to latest Published: Oct 20, 2023 License: Apache-2.0 Imports: 7 Imported by: 90

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func NewDbConnection(cfg *Config, logger *zap.SugaredLogger) (*pg.DB, error)
type AuditLog
type Config
- func GetConfig() (*Config, error)
type TransactionUtilImpl
- func NewTransactionUtilImpl(db *pg.DB) *TransactionUtilImpl
type TransactionWrapper

Constants ¶

This section is empty.

Variables ¶

View Source

var PgSqlWireSet = wire.NewSet(
	GetConfig,
	NewDbConnection,
)

Functions ¶

func NewDbConnection ¶

func NewDbConnection(cfg *Config, logger *zap.SugaredLogger) (*pg.DB, error)

Types ¶

type AuditLog ¶

type AuditLog struct {
	CreatedOn time.Time `sql:"created_on,type:timestamptz"`
	CreatedBy int32     `sql:"created_by,type:integer"`
	UpdatedOn time.Time `sql:"updated_on,type:timestamptz"`
	UpdatedBy int32     `sql:"updated_by,type:integer"`
}

type Config ¶

type Config struct {
	Addr                   string `env:"PG_ADDR" envDefault:"127.0.0.1"`
	Port                   string `env:"PG_PORT" envDefault:"5432"`
	User                   string `env:"PG_USER" envDefault:""`
	Password               string `env:"PG_PASSWORD" envDefault:"" secretData:"-"`
	Database               string `env:"PG_DATABASE" envDefault:"orchestrator"`
	ApplicationName        string `env:"APP" envDefault:"orchestrator"`
	LogQuery               bool   `env:"PG_LOG_QUERY" envDefault:"true"`
	LogAllQuery            bool   `env:"PG_LOG_ALL_QUERY" envDefault:"false"`
	ExportPromMetrics      bool   `env:"PG_EXPORT_PROM_METRICS" envDefault:"false"`
	QueryDurationThreshold int64  `env:"PG_QUERY_DUR_THRESHOLD" envDefault:"5000"`
}

func GetConfig ¶

func GetConfig() (*Config, error)

type TransactionUtilImpl ¶ added in v0.6.19

type TransactionUtilImpl struct {
	// contains filtered or unexported fields
}

func NewTransactionUtilImpl ¶ added in v0.6.19

func NewTransactionUtilImpl(db *pg.DB) *TransactionUtilImpl

func (*TransactionUtilImpl) CommitTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) CommitTx(tx *pg.Tx) error

func (*TransactionUtilImpl) RollbackTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) RollbackTx(tx *pg.Tx) error

func (*TransactionUtilImpl) StartTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) StartTx() (*pg.Tx, error)

type TransactionWrapper ¶ added in v0.6.19

type TransactionWrapper interface {
	StartTx() (*pg.Tx, error)
	RollbackTx(tx *pg.Tx) error
	CommitTx(tx *pg.Tx) error
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL