Affected by GO-2025-3492 and 8 other vulnerabilities

GO-2025-3492: Memos Server-Side Request Forgery (SSRF) in github.com/usememos/memos

GO-2025-3936: Memos Vulnerable to Path Traversal via the CreateResource Endpoint in github.com/usememos/memos

GO-2025-3937: Memos Vulnerable to Stored Cross-Site Scripting in github.com/usememos/memos

GO-2025-4127: Memos' Access Tokens Stay Valid after User Password Change in github.com/usememos/memos

GO-2025-4215: memos vulnerability allows arbitrarily reactions deletion in github.com/usememos/memos

GO-2025-4216: memos vulnerability allows arbitrarily modification or deletion of attachments in github.com/usememos/memos

GO-2025-4217: memos vulnerability allows the creation of arbitrary accounts in github.com/usememos/memos

GO-2025-4218: memos lacks file name validation or verification in github.com/usememos/memos

GO-2025-4220: memos vulnerability allows arbitrarily modification or deletion registered identity providers in github.com/usememos/memos

filter

package

v0.24.4 Latest Latest Go to latest Published: Jun 2, 2025 License: MIT Imports: 8 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/usememos/memos

Links

Documentation ¶

Index ¶

Variables
func GetConstValue(expr *exprv1.Expr) (any, error)
func GetExprValue(expr *exprv1.Expr) (any, error)
func GetFunctionValue(expr *exprv1.Expr) (any, error)
func GetIdentExprName(expr *exprv1.Expr) (string, error)
func Parse(filter string, opts ...cel.EnvOption) (expr *exprv1.ParsedExpr, err error)
type ConvertContext
- func NewConvertContext() *ConvertContext

Constants ¶

This section is empty.

Variables ¶

View Source

var MemoFilterCELAttributes = []cel.EnvOption{
	cel.Variable("content", cel.StringType),
	cel.Variable("creator_id", cel.IntType),
	cel.Variable("created_ts", cel.IntType),
	cel.Variable("updated_ts", cel.IntType),
	cel.Variable("pinned", cel.BoolType),
	cel.Variable("tag", cel.StringType),
	cel.Variable("visibility", cel.StringType),
	cel.Variable("has_task_list", cel.BoolType),

	cel.Function("now",
		cel.Overload("now",
			[]*cel.Type{},
			cel.IntType,
			cel.FunctionBinding(func(_ ...ref.Val) ref.Val {
				return types.Int(time.Now().Unix())
			}),
		),
	),
}

MemoFilterCELAttributes are the CEL attributes for memo.

Functions ¶

func GetConstValue ¶

func GetConstValue(expr *exprv1.Expr) (any, error)

GetConstValue returns the constant value of the expression.

func GetExprValue ¶ added in v0.24.4

func GetExprValue(expr *exprv1.Expr) (any, error)

GetExprValue attempts to get a value from an expression, trying constants first, then functions.

func GetFunctionValue ¶ added in v0.24.4

func GetFunctionValue(expr *exprv1.Expr) (any, error)

GetFunctionValue evaluates CEL function calls and returns their value. This is specifically for time functions like now().

func GetIdentExprName ¶

func GetIdentExprName(expr *exprv1.Expr) (string, error)

GetIdentExprName returns the name of the identifier expression.

func Parse ¶

func Parse(filter string, opts ...cel.EnvOption) (expr *exprv1.ParsedExpr, err error)

Parse parses the filter string and returns the parsed expression. The filter string should be a CEL expression.

Types ¶

type ConvertContext ¶

type ConvertContext struct {
	Buffer strings.Builder
	Args   []any
	// The offset of the next argument in the condition string.
	// Mainly using for PostgreSQL.
	ArgsOffset int
}

func NewConvertContext ¶

func NewConvertContext() *ConvertContext

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL