GO-2024-3260: Devtron has SQL Injection in CreateUser API in github.com/devtron-labs/devtron

sql

package

v0.7.2-rc.0 Latest Latest Go to latest Published: Jul 11, 2024 License: Apache-2.0 Imports: 7 Imported by: 90

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/devtron-labs/devtron

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func NewDbConnection(cfg *Config, logger *zap.SugaredLogger) (*pg.DB, error)
type AuditLog
- func NewDefaultAuditLog(userId int32) AuditLog
- func (model *AuditLog) CreateAuditLog(userId int32)
- func (model *AuditLog) UpdateAuditLog(userId int32)
type Config
- func GetConfig() (*Config, error)
type TransactionUtilImpl
- func NewTransactionUtilImpl(db *pg.DB) *TransactionUtilImpl
type TransactionWrapper

Constants ¶

This section is empty.

Variables ¶

View Source

var PgSqlWireSet = wire.NewSet(
	GetConfig,
	NewDbConnection,
)

Functions ¶

func NewDbConnection ¶

func NewDbConnection(cfg *Config, logger *zap.SugaredLogger) (*pg.DB, error)

Types ¶

type AuditLog ¶

type AuditLog struct {
	CreatedOn time.Time `sql:"created_on,type:timestamptz"`
	CreatedBy int32     `sql:"created_by,type:integer"`
	UpdatedOn time.Time `sql:"updated_on,type:timestamptz"`
	UpdatedBy int32     `sql:"updated_by,type:integer"`
}

func NewDefaultAuditLog ¶ added in v0.6.26

func NewDefaultAuditLog(userId int32) AuditLog

func (*AuditLog) CreateAuditLog ¶ added in v0.6.29

func (model *AuditLog) CreateAuditLog(userId int32)

CreateAuditLog can be used by any repository to create AuditLog for insert operation

func (*AuditLog) UpdateAuditLog ¶ added in v0.6.29

func (model *AuditLog) UpdateAuditLog(userId int32)

UpdateAuditLog can be used by any repository to update AuditLog for update operation

type Config ¶

type Config struct {
	Addr                   string `env:"PG_ADDR" envDefault:"127.0.0.1"`
	Port                   string `env:"PG_PORT" envDefault:"5432"`
	User                   string `env:"PG_USER" envDefault:""`
	Password               string `env:"PG_PASSWORD" envDefault:"" secretData:"-"`
	Database               string `env:"PG_DATABASE" envDefault:"orchestrator"`
	CasbinDatabase         string `env:"CASBIN_DATABASE" envDefault:"casbin"`
	ApplicationName        string `env:"APP" envDefault:"orchestrator"`
	LogQuery               bool   `env:"PG_LOG_QUERY" envDefault:"true"`
	LogAllQuery            bool   `env:"PG_LOG_ALL_QUERY" envDefault:"false"`
	ExportPromMetrics      bool   `env:"PG_EXPORT_PROM_METRICS" envDefault:"false"`
	QueryDurationThreshold int64  `env:"PG_QUERY_DUR_THRESHOLD" envDefault:"5000"`
	ReadTimeout            int64  `env:"PG_READ_TIMEOUT" envDefault:"30"`
	WriteTimeout           int64  `env:"PG_WRITE_TIMEOUT" envDefault:"30"`
}

func GetConfig ¶

func GetConfig() (*Config, error)

type TransactionUtilImpl ¶ added in v0.6.19

type TransactionUtilImpl struct {
	// contains filtered or unexported fields
}

func NewTransactionUtilImpl ¶ added in v0.6.19

func NewTransactionUtilImpl(db *pg.DB) *TransactionUtilImpl

func (*TransactionUtilImpl) CommitTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) CommitTx(tx *pg.Tx) error

func (*TransactionUtilImpl) RollbackTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) RollbackTx(tx *pg.Tx) error

func (*TransactionUtilImpl) StartTx ¶ added in v0.6.19

func (impl *TransactionUtilImpl) StartTx() (*pg.Tx, error)

type TransactionWrapper ¶ added in v0.6.19

type TransactionWrapper interface {
	StartTx() (*pg.Tx, error)
	RollbackTx(tx *pg.Tx) error
	CommitTx(tx *pg.Tx) error
}

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL