search

metrico / qryn-view

qryn polyglot user interface to explore logs, metrics and traces :eye: Grafana Explore alternative compatible with Loki, Prometheus and Tempo
http://view.cloki.org/
GNU Affero General Public License v3.0
39 stars 5 forks source link

Type all url params for state management #394

Closed jacovinus closed 6 months ago

jacovinus commented 6 months ago

Describe the bug.

We have a security issue pointing to the parsing of url params that are input mannually. For solving this we will type all acceptable url params and filter the ones that are not allowed

Reproduction

Type custom url params the application should filter the ones that are not part of the application

Application version

0.23.0

Browser version

No response

Logs

No response

Anything else?

No response

jacovinus commented 6 months ago

fixed at #395