vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
cozystack/packages/apps/postgres/templates
History
Exact
IvanHunters fac0622499
fix(postgres): make security denylist case-insensitive 
PostgreSQL parameter names are case-insensitive, but the denylist
check was case-sensitive, allowing bypass via mixed-case names
(e.g., ARCHIVE_COMMAND instead of archive_command).

Normalize parameter names to lowercase before checking against the
denylist to prevent security bypass.

Thanks to CodeRabbit for catching this security issue.

Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>
2026-04-30 01:43:43 +03:00
..
.gitkeep Preapare release v0.0.1 2024-02-08 12:04:32 +01:00
_postgresjobs.tpl add rq for pg 2025-06-11 22:48:09 +03:00
_resources.tpl Don't overcommit memory or throttle CPU 2025-05-12 15:59:28 +03:00
_versions.tpl [postgres] Add version management system with automated version updates 2025-12-01 23:56:55 +01:00
backup-secret.yaml [postgres] add backup and restore 2025-06-23 15:38:34 +02:00
backup.yaml wrap cron in quotes to avoid yaml issues 2025-06-23 17:59:05 +03:00
dashboard-resourcemap.yaml bugfix fix pg LB frontend 2025-07-16 11:56:45 +03:00
db.yaml fix(postgres): make security denylist case-insensitive 2026-04-30 01:43:43 +03:00
external-svc.yaml [platform] Autodetect RobotLB 2025-07-24 18:55:30 +03:00
init-job.yaml [postgres] Add version management system with automated version updates 2025-12-01 23:56:55 +01:00
init-script.yaml fix(postgres): use DROP DATABASE WITH (FORCE) to avoid race condition 2026-03-25 12:17:51 +05:00
regsecret.yaml Preapare release v0.0.1 2024-02-08 12:04:32 +01:00