abcxyz / github-metrics-aggregator

Apache License 2.0
12 stars 3 forks source link

Add validation to SQL inputs for webhook and retry service. #199

Open pdewilde opened 10 months ago

pdewilde commented 10 months ago

pkg/retry and pkg/webhook doesn't yet use the improved validation added in #198

This is not a huge concern as the threat model for this particular injection risk is a privileged insider who likely already has sufficient access to the database anyways. Mainly this is to ensure that we have secure patterns so if they are copied or used elsewhere we don't accidentally introduce injection bugs.