vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
cozystack/packages/apps
History
Exact
IvanHunters fac0622499
fix(postgres): make security denylist case-insensitive 
PostgreSQL parameter names are case-insensitive, but the denylist
check was case-sensitive, allowing bypass via mixed-case names
(e.g., ARCHIVE_COMMAND instead of archive_command).

Normalize parameter names to lowercase before checking against the
denylist to prevent security bypass.

Thanks to CodeRabbit for catching this security issue.

Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
2026-04-30 01:43:43 +03:00
..
bucket fix(controller): address review findings for BucketClaim reconciler 2026-04-17 10:58:47 +03:00
clickhouse feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
foundationdb feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
harbor fix(platform): migrate ACME HTTP-01 to ingressClassName API 2026-04-21 17:00:31 +05:00
http-cache feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
kafka feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
kubernetes fix(kubernetes): gate HAMi HelmRelease on _namespace.etcd 2026-04-29 11:13:42 +03:00
mariadb Prepare release v1.3.0 2026-04-22 07:28:09 +00:00
mongodb feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
nats feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
openbao feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
opensearch feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
postgres fix(postgres): make security denylist case-insensitive 2026-04-30 01:43:43 +03:00
qdrant feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
rabbitmq feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
redis feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
tcp-balancer feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
tenant refactor(ingress): move CiliumLoadBalancerIPPool to tenant chart 2026-04-24 16:44:46 +03:00
vm-disk [vm-disk] Remove unused DataVolume lookup in dv.yaml 2026-04-14 19:59:19 +05:00
vm-instance [vm-instance] Add externalAllowICMP knob, drop in-PR changelog 2026-04-28 08:37:13 +02:00
vpc [docs] Update cozyvalues-gen 2026-03-25 15:59:22 +05:00
vpn feat(platform): add resourcePreset labels 2026-04-17 15:04:25 +04:00
Makefile refactor: move scripts to hack directory 2026-01-15 16:06:56 +01:00
README.md [clickhouse] add clickhouse keeper 2025-08-07 14:07:05 +03:00

README.md

How to test packages local

cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd