Mirrored_Repos/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/jc21/nginx-proxy-manager.git synced 2024-08-30 18:22:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Better checking for api sort param to prevent sql injection

Browse Source 
And moved filters out and cached object reflection
This commit is contained in:
Jamie Curnow
2023-07-24 11:49:08 +10:00
parent 9b32329f41
commit a0e17f9678
12 changed files with 312 additions and 223 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
backend/internal/api/router.go
View File

@ -104,7 +104,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityUsersManage),
middleware.Filters(user.Model{}),
middleware.ListQuery(user.Model{}),
).Get("/", handler.GetUsers())
// Specific Item
@ -136,7 +136,7 @@ func applyRoutes(r chi.Router) chi.Router {
r.With(middleware.EnforceSetup(true), middleware.Enforce(user.CapabilitySettingsManage)).Route("/settings", func(r chi.Router) {
// List
r.With(
middleware.Filters(setting.Model{}),
middleware.ListQuery(setting.Model{}),
).Get("/", handler.GetSettings())
r.Get("/{name}", handler.GetSetting())
@ -151,7 +151,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityAccessListsView),
middleware.Filters(accesslist.Model{}),
middleware.ListQuery(accesslist.Model{}),
).Get("/", handler.GetAccessLists())
// Create
@ -175,7 +175,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityDNSProvidersView),
middleware.Filters(dnsprovider.Model{}),
middleware.ListQuery(dnsprovider.Model{}),
).Get("/", handler.GetDNSProviders())
// Create
@ -205,7 +205,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityCertificateAuthoritiesView),
middleware.Filters(certificateauthority.Model{}),
middleware.ListQuery(certificateauthority.Model{}),
).Get("/", handler.GetCertificateAuthorities())
// Create
@ -235,7 +235,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityCertificatesView),
middleware.Filters(certificate.Model{}),
middleware.ListQuery(certificate.Model{}),
).Get("/", handler.GetCertificates())
// Create
@ -262,7 +262,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityHostsView),
middleware.Filters(host.Model{}),
middleware.ListQuery(host.Model{}),
).Get("/", handler.GetHosts())
// Create
@ -288,7 +288,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityNginxTemplatesView),
middleware.Filters(nginxtemplate.Model{}),
middleware.ListQuery(nginxtemplate.Model{}),
).Get("/", handler.GetNginxTemplates())
// Create
@ -312,7 +312,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityStreamsView),
middleware.Filters(stream.Model{}),
middleware.ListQuery(stream.Model{}),
).Get("/", handler.GetStreams())
// Create
@ -336,7 +336,7 @@ func applyRoutes(r chi.Router) chi.Router {
// List
r.With(
middleware.Enforce(user.CapabilityHostsView),
middleware.Filters(upstream.Model{}),
middleware.ListQuery(upstream.Model{}),
).Get("/", handler.GetUpstreams())
// Create