handlers

package

Go to main page

Versions in this module

v0

v0.5.81

Sep 5, 2026

v0.5.9

Sep 8, 2026

Changes in this version

type FeaturesResponse

+ Health bool

type HandlersApi

+ Health *health.Manager

+ HealthVersions *health.VersionCache

+ Redis *cache.RedisManager

+ StartedAt time.Time

+ func (h *HandlersApi) HealthStatusHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithHealth(mgr *health.Manager) HandlersOption

+ func WithHealthVersions(c *health.VersionCache) HandlersOption

+ func WithRedis(rm *cache.RedisManager) HandlersOption

+ func WithStartedAt(t time.Time) HandlersOption

v0.5.8

Sep 3, 2026

Changes in this version

type FeaturesResponse

+ Alerts bool

type HandlersApi

+ Alerts *alerts.Manager

+ func (h *HandlersApi) AlertChannelsCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsGetHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsTestHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsTypesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertChannelsUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertHistoryHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertRuleGetHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertRulesCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertRulesDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertRulesListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertRulesUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AlertsApplyHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithAlerts(mgr *alerts.Manager) HandlersOption

v0.5.7

Aug 24, 2026

Changes in this version

type AuthMethod

+ ID uint

+ Name string

+ type AuthProviderRegistry struct

+ func NewAuthProviderRegistry(entries []authproviders.ProviderEntry) *AuthProviderRegistry

+ func (r *AuthProviderRegistry) AllByType(typ string) []authproviders.ProviderEntry

+ func (r *AuthProviderRegistry) AllProviders() []authproviders.ProviderEntry

+ func (r *AuthProviderRegistry) Get(id uint) *authproviders.ProviderEntry

+ func (r *AuthProviderRegistry) HasOIDC() bool

+ func (r *AuthProviderRegistry) HasSAML() bool

+ func (r *AuthProviderRegistry) Replace(entries []authproviders.ProviderEntry)

+ type ErrorNodeRow struct

+ Errors int64

+ Hostname string

+ UUID string

type FeaturesResponse

+ AuthProviders bool

+ LogSinks bool

type HandlersApi

+ AuthProviderMgr *authproviders.AuthProviderManager

+ AuthProviders *AuthProviderRegistry

+ AuthProvidersEnabled bool

+ LogSinks *logsinks.LogSinksManager

+ LogSinksEnabled bool

+ func (h *HandlersApi) AuthProvidersApplyHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersFetchMetadataHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersGetHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersRevertHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersTestHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersTypesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AuthProvidersUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvErrorNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksApplyHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksCloneHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksGetHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksRevertHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksTypesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogSinksUpdateHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithAuthProviders(reg *AuthProviderRegistry, mgr *authproviders.AuthProviderManager) HandlersOption

+ func WithAuthProvidersEnabled(enabled bool) HandlersOption

+ func WithLogSinks(mgr *logsinks.LogSinksManager) HandlersOption

+ func WithLogSinksEnabled(enabled bool) HandlersOption

v0.5.6

Aug 19, 2026

Changes in this version

type FeaturesResponse

+ Console bool

+ ServiceConfig bool

type HandlersApi

+ ConfigPersist func() error

+ LogReader logging.LogReader

+ MFA *mfa.Manager

+ MFAIssuer string

+ MFARequired bool

+ RestartCh chan<- struct{}

+ ServiceCommands *servicecommands.Manager

+ ServiceConfig *serviceconfig.ServiceConfigManager

+ ServiceConfigEnabled bool

+ WebAuthn *mfa.WebAuthn

+ func (h *HandlersApi) EnvPackageAddHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvPackageRemoveHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvPackageUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvPackagesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerPrimingResultsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginMFAEnrollBeginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginMFAEnrollFinishHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginMFAHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginMFAWebAuthnBeginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginMFAWebAuthnFinishHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFARecoveryHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFAStatusHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFATOTPBeginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFATOTPDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFATOTPVerifyHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFAWebAuthnBeginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFAWebAuthnDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MFAWebAuthnFinishHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceCommandHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigApplyHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigPersistHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigSectionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigServiceHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigStatusHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ServiceConfigUpdateHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithConfigPersist(fn func() error) HandlersOption

+ func WithLogReader(r logging.LogReader) HandlersOption

+ func WithMFA(manager *mfa.Manager, webAuthn *mfa.WebAuthn, required bool, issuer string) HandlersOption

+ func WithRestartCh(ch chan<- struct{}) HandlersOption

+ func WithServiceCommands(mgr *servicecommands.Manager) HandlersOption

+ func WithServiceConfig(mgr *serviceconfig.ServiceConfigManager) HandlersOption

+ func WithServiceConfigEnabled(enabled bool) HandlersOption

+ type MFAChallengeResponse struct

+ Challenge string

+ MFAEnrollmentRequired bool

+ MFARequired bool

+ Methods []string

+ type MFACodeRequest struct

+ Code string

+ type MFACredential struct

+ CreatedAt string

+ ID string

+ LastUsedAt string

+ Name string

+ type MFAEnrollBeginResponse struct

+ QR string

+ Secret string

+ URI string

+ type MFAEnrollRequest struct

+ Challenge string

+ Code string

+ type MFALoginRequest struct

+ Challenge string

+ Code string

+ Method string

+ type MFAPasswordRequest struct

+ Password string

+ type MFARecoveryCodesResponse struct

+ RecoveryCodes []string

+ type MFAStatusResponse struct

+ Credentials []MFACredential

+ RecoveryCodesLeft int

+ Required bool

+ TOTPEnabled bool

+ WebAuthnAvailable bool

+ type MFATOTPBeginResponse struct

+ QR string

+ Secret string

+ URI string

+ type MFAWebAuthnRequest struct

+ Challenge string

+ Credential json.RawMessage

+ Name string

v0.5.5

Aug 5, 2026

Changes in this version

+ type FeaturesResponse struct

+ Accelerated bool

+ FileExplorer bool

+ Posture bool

type HandlersApi

+ Console *console.Manager

+ DBHealth backend.DegradedReader

+ EnvCache *environments.EnvCache

+ FileExplorer *fileexplorer.Manager

+ GeoIP *geoip.GeoIPResolver

+ Posture *posture.PostureManager

+ PostureEnabled bool

+ func (h *HandlersApi) ConsoleCommandCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ConsoleCommandResultsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ConsoleCommandShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ConsoleSessionCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ConsoleSessionDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ConsoleSessionShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FeaturesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerRequestResultsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerRequestShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerSessionCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerSessionDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerSessionShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) FileExplorerStatHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityTilesBatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodePostureHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodePostureScoreHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PostureProfileHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PostureProfilesHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithConsole(consoleManager *console.Manager) HandlersOption

+ func WithDBHealth(hl backend.DegradedReader) HandlersOption

+ func WithEnvCache(envCache *environments.EnvCache) HandlersOption

+ func WithFileExplorer(fileExplorerManager *fileexplorer.Manager) HandlersOption

+ func WithGeoIP(g *geoip.GeoIPResolver) HandlersOption

+ func WithPosture(pm *posture.PostureManager) HandlersOption

+ func WithPostureEnabled(enabled bool) HandlersOption

type NodeActivityBucket

+ Config int

v0.5.4

Jul 6, 2026

Changes in this version

type HandlersApi

+ Activity activityReader

+ func (h *HandlersApi) EnvActivityTilesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityTilesHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithActivityReader(ar activityReader) HandlersOption

type StatsResponse

+ InactiveHours int64

v0.5.3

Jun 12, 2026

Changes in this version

+ var ErrAuthUserRejected = errors.New("auth: identity cannot be resolved to an AdminUser")

+ func InitOIDC(ctx context.Context, cfg config.YAMLConfigurationOIDC) error

+ func InitSAML(ctx context.Context, cfg config.YAMLConfigurationSAML, entityID, acsURL string) error

+ type AuthMethod struct

+ LoginURL string

+ Type string

+ type AuthMethodsResponse struct

+ Methods []AuthMethod

type HandlersApi

+ JWTSecret []byte

+ OIDCEnabled bool

+ SAMLEnabled bool

+ func (h *HandlersApi) AuthMethodsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvCertUploadHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvConfigurationHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) GetUserPermissionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LogoutHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OIDCCallbackHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OIDCLoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLACSHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLLoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SAMLMetadataHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SetUserPermissionsAllHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithJWTSecret(secret []byte) HandlersOption

+ func WithOIDC(enabled bool) HandlersOption

+ func WithSAML(enabled bool) HandlersOption

+ type LogoutResponse struct

+ AuthSource string

+ IdPClientID string

+ IdPIDTokenHint string

+ IdPLogoutURL string

v0.5.2

May 18, 2026

Changes in this version

+ type ActivityBucket struct

+ BucketStart time.Time

+ Carve int

+ Config int

+ Enroll int

+ Query int

+ type EnvStats struct

+ Active int64

+ ActiveCarves int

+ ActiveQueries int

+ Inactive int64

+ Name string

+ PlatformCounts nodes.PlatformCounts

+ Total int64

+ UUID string

type HandlersApi

+ OsqueryTables []types.OsqueryTable

+ OsqueryValues config.YAMLConfigurationOsquery

+ func (h *HandlersApi) CarveArchiveHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveSamplesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) DeleteUserTokenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvActivityHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentConfigHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentConfigPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentExpirationPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentIntervalsPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) LoginEnvironmentsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MePasswordHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) MePatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityBatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeActivityHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeLogsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodesPagedHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OsqueryTablesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) OsqueryVersionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryResultsCSVHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QuerySamplesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) RefreshUserTokenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueriesListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryCreateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryDeleteHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SavedQueryUpdateHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SetUserPermissionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingPatchHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) StatsHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithOsqueryTables(tables []types.OsqueryTable) HandlersOption

+ func WithOsqueryValues(values config.YAMLConfigurationOsquery) HandlersOption

+ type NodeActivityBucket struct

+ BucketStart time.Time

+ Carve int

+ Query int

+ Result int

+ Status int

+ type NodeLogsResponse struct

+ Env string

+ Items []map[string]any

+ Limit int

+ Since string

+ Type string

+ UUID string

+ type StatsResponse struct

+ ActiveNodes int64

+ Environments []EnvStats

+ InactiveNodes int64

+ PlatformCounts nodes.PlatformCounts

+ TotalActiveCarves int

+ TotalActiveQueries int

+ TotalNodes int64

v0.5.1

Mar 31, 2026

v0.5.0

Feb 24, 2026

v0.4.9

Dec 24, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.8

Nov 5, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ AuditLog *auditlog.AuditLogManager

+ func (h *HandlersApi) AuditLogsHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithAuditLog(auditLog *auditlog.AuditLogManager) HandlersOption

v0.4.7

Sep 30, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.6

Sep 2, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ func (h *HandlersApi) CheckHandlerAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CheckHandlerNoAuth(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagNodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UserActionHandler(w http.ResponseWriter, r *http.Request)

v0.4.5

Aug 9, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

type HandlersApi

+ DebugHTTP *zerolog.Logger

+ DebugHTTPConfig *config.DebugHTTPConfiguration

+ func (h *HandlersApi) LookupNodeHandler(w http.ResponseWriter, r *http.Request)

type HandlersOption

+ func WithDebugHTTP(cfg *config.DebugHTTPConfiguration) HandlersOption

v0.4.4

Mar 26, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

v0.4.3

Feb 22, 2025 GO-2026-4576 +1 more

GO-2026-4576: osctrl has Stored Cross-Site Scripting (XSS) in On-Demand Query List in github.com/jmpsec/osctrl

GO-2026-4579: osctrl is Vulnerable to OS Command Injection via Environment Configuration in github.com/jmpsec/osctrl

Changes in this version

+ var EnvMapTargets = map[string]bool

+ var QueryTargets = map[string]bool

+ type APIQueryData map[string]string

+ type ContextKey string

+ type ContextValue map[string]string

+ type HandlersApi struct

+ ApiConfig *types.JSONConfigurationAPI

+ Carves *carves.Carves

+ DB *gorm.DB

+ Envs *environments.Environment

+ Metrics *metrics.Metrics

+ Nodes *nodes.NodeManager

+ Queries *queries.Queries

+ RedisCache *cache.RedisManager

+ ServiceName string

+ ServiceVersion string

+ Settings *settings.Settings

+ Tags *tags.TagManager

+ Users *users.UserManager

+ func CreateHandlersApi(opts ...HandlersOption) *HandlersApi

+ func (h *HandlersApi) ActiveNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllQueriesShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) AllTagsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveQueriesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarveShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarvesActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) CarvesRunHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) DeleteNodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvEnrollActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvEnrollHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvRemoveActionsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvRemoveHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentMapHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) EnvironmentsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ErrorHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) ForbiddenHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) HealthHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) InactiveNodesHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) Inc(name string)

+ func (h *HandlersApi) LoginHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) NodeHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PlatformsEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) PlatformsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueriesActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueriesRunHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryListHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryResultsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) QueryShowHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) RootHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceEnvJSONHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) SettingsServiceJSONHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagsActionHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) TagsEnvHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UserHandler(w http.ResponseWriter, r *http.Request)

+ func (h *HandlersApi) UsersHandler(w http.ResponseWriter, r *http.Request)

+ type HandlersOption func(*HandlersApi)

+ func WithCache(rds *cache.RedisManager) HandlersOption

+ func WithCarves(carves *carves.Carves) HandlersOption

+ func WithDB(db *gorm.DB) HandlersOption

+ func WithEnvs(envs *environments.Environment) HandlersOption

+ func WithMetrics(metrics *metrics.Metrics) HandlersOption

+ func WithName(name string) HandlersOption

+ func WithNodes(nodes *nodes.NodeManager) HandlersOption

+ func WithQueries(queries *queries.Queries) HandlersOption

+ func WithSettings(settings *settings.Settings) HandlersOption

+ func WithTags(tags *tags.TagManager) HandlersOption

+ func WithUsers(users *users.UserManager) HandlersOption

+ func WithVersion(version string) HandlersOption

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL