diff --git a/pkg/api/dataproxy.go b/pkg/api/dataproxy.go index 97f2529c781..34c4271ebf6 100644 --- a/pkg/api/dataproxy.go +++ b/pkg/api/dataproxy.go @@ -95,6 +95,13 @@ func ProxyDataSourceRequest(c *middleware.Context) { return } + if ds.Type == m.DS_INFLUXDB { + if c.Query("db") != ds.Database { + c.JsonApiErr(403, "Datasource is not configured to allow this database", nil) + return + } + } + targetUrl, _ := url.Parse(ds.Url) if len(setting.DataProxyWhiteList) > 0 { if _, exists := setting.DataProxyWhiteList[targetUrl.Host]; !exists {