timescale / prometheus-postgresql-adapter

Use PostgreSQL as a remote storage database for Prometheus
Apache License 2.0
335 stars 66 forks source link

Fix SQL injection #53

Closed lnovy closed 5 years ago

lnovy commented 5 years ago

This adapter was vulnerable to a SQL injection.

I have run some tests, but nothing too robust. Also I have never done golang before...

niksajakovljevic commented 5 years ago

@lnovy I am closing this since it's been addressed with https://github.com/timescale/prometheus-postgresql-adapter/pull/55