public/grafana
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a1d4846f7ffb3f766a80becc7dae42e770133fd4
grafana/pkg/api
T
History
Dimitris SotirakisKyle BrandtSofia Papagiannaki
 6aafac7e60 [v8.3.x] Security: Fix directory traversal issue (#42838) 
* security: fix dir traversal issue

* Improve comments and error message.

* Fix lint

Co-authored-by: Kyle Brandt <kyle@grafana.com>
Co-authored-by: Sofia Papagiannaki <1632407+papagian@users.noreply.github.com>
2021-12-07 19:37:30 +02:00
..
apierrors
Migrate to Wire for dependency injection (#32289)
2021-08-25 15:11:22 +02:00
avatar
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
datasource
Chore: Remove unused Go code (#28852)
2020-11-17 11:51:31 +01:00
dtos
Plugins: Plugin Store API returns DTO model (#41340)
2021-11-17 12:04:22 +01:00
frontendlogging
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
navlinks
show admin nav link it the user only has permissions to view licensing and not other pages under admin node (#41948) (#41956)
2021-11-19 14:49:25 +00:00
pluginproxy
OAuth: Forward id token to the data source (#42422) (#42451)
2021-11-29 16:01:22 +01:00
response
[Alerting] Forking LoTex ruler (#32138)
2021-03-19 10:32:13 -04:00
routing
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
static
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
acl.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
admin_provisioning_test.go
Chore: Add context to org (#40685)
2021-11-03 11:31:56 +01:00
admin_provisioning.go
Chore: Add context to org (#40685)
2021-11-03 11:31:56 +01:00
admin_test.go
Access Control: Add fine-grained access control to GET stats and settings handlers (#35622)
2021-06-14 17:36:48 +02:00
admin_users_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
admin_users.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
admin.go
Chore: Add context to star and stats (#39591)
2021-09-28 17:54:45 +02:00
alerting_test.go
Search: add sort information in dashboard results (#30609)
2021-02-11 08:49:16 +01:00
alerting.go
add context in the alert_notification (#41307)
2021-11-05 16:41:24 +08:00
annotations_test.go
Annotations: Adds tags endpoint (#36199)
2021-06-30 13:42:54 +02:00
annotations.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
api.go
Alerting: Make Unified Alerting enabled by default for those who do not use legacy alerting (#42200) (#42259)
2021-11-24 22:16:03 +01:00
apikey.go
Handle request service account when not enabled (#42122) (#42201)
2021-11-25 11:57:30 +01:00
app_routes.go
Plugins: Plugin Store API returns DTO model (#41340)
2021-11-17 12:04:22 +01:00
basic_auth_test.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
basic_auth.go
Macaron: remove custom Request type (#37874)
2021-09-01 11:18:30 +02:00
common_test.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
dashboard_permission_test.go
Forbid creation of dashboard permissions with both a user and a team (#40104)
2021-10-13 12:16:58 -06:00
dashboard_permission.go
Forbid creation of dashboard permissions with both a user and a team (#40104)
2021-10-13 12:16:58 -06:00
dashboard_snapshot_test.go
Chore: Refactor securedata to remove global encryption calls from dashboard snapshots (#38714)
2021-09-01 13:05:15 +02:00
dashboard_snapshot.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
dashboard_test.go
Live: crud for remote write backends (#40147)
2021-11-05 12:13:40 +03:00
dashboard.go
Plugins: Plugin Store API returns DTO model (#41340)
2021-11-17 12:04:22 +01:00
dataproxy.go
Data Source Proxy: Migrate proxy to its own service and make more extensible (#31927)
2021-03-17 13:10:40 -04:00
datasources_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
datasources.go
Plugins: Plugin Store API returns DTO model (#41340)
2021-11-17 12:04:22 +01:00
fakes.go
Plugins: Plugin Store API returns DTO model (#41340)
2021-11-17 12:04:22 +01:00
folder_permission_test.go
Chore: Propagate context for dashboard guardian (#39201)
2021-09-23 17:43:32 +02:00
folder_permission.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
folder_test.go
Chore: GetDashboardQuery should be dispatched using DispatchCtx (#36877)
2021-09-14 16:08:04 +02:00
folder.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
frontend_logging_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
frontend_logging.go
Logging: sourcemap support for frontend stacktraces (#30590)
2021-02-04 08:37:28 +02:00
frontend_metrics.go
FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#32593)
2021-04-01 20:04:02 +02:00
frontendsettings_test.go
Plugins: Refactor Plugin Management (#40477)
2021-11-01 10:53:33 +01:00
frontendsettings.go
only preload app plugins (#42434) (#42477)
2021-11-29 18:43:22 +01:00
grafana_com_proxy.go
Plugins Catalog: Install and show the latest compatible version of a plugin (#41003)
2021-11-12 11:07:12 +01:00
health_test.go
Context: Add context to /api/health calls (#40031)
2021-10-11 14:35:03 +02:00
health.go
Context: Add context to /api/health calls (#40031)
2021-10-11 14:35:03 +02:00
http_server_test.go
Tests: Batch of GoConvey to Testify conversions (#27008)
2020-08-14 14:43:25 +02:00
http_server.go
Replace encryption.Service usages by secrets.Service (#41625)
2021-11-12 12:16:39 +01:00
index.go
Alerting: Make Unified Alerting enabled by default for those who do not use legacy alerting (#42200) (#42259)
2021-11-24 22:16:03 +01:00
ldap_debug_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
ldap_debug.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
login_oauth_test.go
OAuth: Support PKCE (#39948)
2021-10-13 16:45:15 +02:00
login_oauth.go
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
login_test.go
Encryption: Use secrets service (#40251)
2021-11-04 18:47:21 +02:00
login.go
remove the global log error/warn etc functions (#41404)
2021-11-08 17:56:56 +01:00
metrics.go
OAuth: Forward id token to the data source (#42422) (#42451)
2021-11-29 16:01:22 +01:00
org_invite.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
org_test.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
org_users_test.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
org_users.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
org.go
Found typo while reading code comments (#41740)
2021-11-17 15:19:45 +01:00
password.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
playlist_play.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
playlist.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
plugins_test.go
[v8.3.x] Security: Fix directory traversal issue (#42838)
2021-12-07 19:37:30 +02:00
plugins.go
[v8.3.x] Security: Fix directory traversal issue (#42838)
2021-12-07 19:37:30 +02:00
preferences_test.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
preferences.go
Chore: Propagate context for preferences (#41167)
2021-11-02 13:41:45 +01:00
quota_test.go
AccessControl: Remove scopes from orgs endpoints (#41709)
2021-11-17 10:12:28 +01:00
quota.go
AccessControl: Add FGAC to orgs endpoints (#39579)
2021-10-27 13:13:59 +02:00
render.go
Rendering: Add light theme for errors (#41616)
2021-11-17 12:18:47 +01:00
roles.go
AccessControl: Renamed orgs roles, removed fixed:orgs:reader introduced in beta1 (#42049) (#42182)
2021-11-24 11:09:06 +01:00
search.go
Chore: Propagate context for search (#41010)
2021-10-28 11:29:07 +02:00
short_url_test.go
Chore: Refactor short url api test (#35051)
2021-06-01 20:34:59 +02:00
short_url.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
signup.go
Chore: add context to login (#41316)
2021-11-08 15:53:51 +01:00
stars.go
Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
2021-02-27 18:04:28 +01:00
team_members_test.go
Add an option to hide certain users in the UI (#28942)
2020-11-24 12:10:32 +01:00
team_members.go
Chore: Add context to team (#40504)
2021-10-18 14:02:39 +02:00
team_test.go
Chore: replace macaron with web package (#40136)
2021-10-11 14:30:59 +02:00
team.go
Chore: Propagate context for preferences (#41167)
2021-11-02 13:41:45 +01:00
user_test.go
Create search filters by interface (#39843)
2021-10-07 16:06:16 +02:00
user_token_test.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
user_token.go
add context to getsignedinUser calls (#35963)
2021-06-21 07:51:33 +02:00
user.go
Chore: Add context to user (#39649)
2021-10-04 15:46:09 +02:00
utils.go
Permissions: Validate against Team/User permission role update (#29101)
2020-11-18 15:36:41 +01:00