Sam Jewell ceff188b35 [v11.0.x] ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94971) ...

ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94942)

* disable sql expressions

remove duckdb ref

* Run `make update-workspace`

---------

Co-authored-by: Scott Lepper <scott.lepper@gmail.com>
(cherry picked from commit ea71201ddc)

2024-10-18 09:48:48 -04:00

..

classic

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

mathexp

Chore: Remove repetitive words (#84132)

2024-03-11 08:55:18 -04:00

ml

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

sql

[v11.0.x] ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94971)

2024-10-18 09:48:48 -04:00

commands_test.go

Expressions: Add model struct for the query types (not map[string]any) (#82745)

2024-02-17 02:59:11 +02:00

commands.go

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

converter_test.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

converter.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

dataplane_test.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

dataplane.go

Tracing: Standardize on otel tracing (#75528)

2023-10-03 14:54:20 +02:00

errors_test.go

SSE: Use errutil to show better error messages in prod (#71658)

2023-07-21 06:38:29 -04:00

errors.go

SSE: Localize/Contain Errors within an Expression (#73163)

2023-09-13 13:58:16 -04:00

graph_test.go

Expressions: Add model struct for the query types (not map[string]any) (#82745)

2024-02-17 02:59:11 +02:00

graph.go

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

hysteresis_test.go

SSE: Add utility methods for HysteresisCommand (#79157)

2023-12-11 22:40:31 +02:00

hysteresis.go

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

metrics.go

SSE: (Instrumentation/Chore) Add datasource_type label to grafana_sse (#72370)

2023-07-26 10:51:02 -04:00

ml_test.go

Chore: Remove plugincontext.ErrPluginNotFound (#74997)

2023-09-25 13:10:47 +03:00

ml.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

nodes_test.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

nodes.go

Alerting: Log expression command types during evaluation (#84614)

2024-03-19 10:00:03 -04:00

query_test.go

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.go

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.panel.example.json

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.panel.schema.json

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.request.example.json

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.request.schema.json

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

query.types.json

[v11.0.x] Expressions+Testdata: Create json schema for query types (#86164)

2024-04-15 16:09:50 +01:00

reader.go

[v11.0.x] ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94971)

2024-10-18 09:48:48 -04:00

service_test.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

service.go

Expressions: expose ConvertDataFramesToResults (#83805)

2024-03-04 18:22:56 +02:00

sql_command_test.go

[sql expressions] fix: use ast to read tables (#87867) - backport (#87875)

2024-05-15 07:52:04 -04:00

sql_command.go

[v11.0.x] ServerSideExpressions: Disable SQL Expressions to prevent RCE and LFI vulnerability (#94971)

2024-10-18 09:48:48 -04:00

testing.go

Chore: use any rather than interface{} (#74066)

2023-08-30 18:46:47 +03:00

threshold_test.go

Expressions: Use enumerations rather than strings (#83741)

2024-03-01 19:38:32 +02:00

threshold.go

[v11.0.x] SSE: Fix threshold unmarshal to avoid panic (#88651)

2024-06-04 08:55:21 -04:00

transform.go

Replace signed in user for identity.requester (#74048)

2023-08-30 16:51:18 +02:00