klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-09 01:36:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Cross-Workspace Data-Source Schema Disclosure and Modification (Incomplete IDOR Remediation)

Browse Source
This commit is contained in:
junjun
2026-08-31 11:09:23 +08:00
committed by Junjun
parent bbfc4cc8f5
commit c1d333e62d
6 changed files with 23 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/api/datasource.ts
+3 -4
View File
@@ -18,16 +18,15 @@ export const datasourceApi = {
request.post(`/datasource/execSql/${id}`, { sql: sql }),
chooseTables: (id: number, data: any) => request.post(`/datasource/chooseTables/${id}`, data),
tableList: (id: number) => request.post(`/datasource/tableList/${id}`),
fieldList: (id: number, data = { fieldName: '' }) =>
request.post(`/datasource/fieldList/${id}`, data),
edit: (data: any) => request.post('/datasource/editLocalComment', data),
fieldList: (ds_id: number, id: number, data = { fieldName: '' }) =>
request.post(`/datasource/fieldList/${ds_id}/${id}`, data),
previewData: (id: number, data: any) => request.post(`/datasource/previewData/${id}`, data),
saveTable: (data: any) => request.post('/datasource/editTable', data),
saveField: (data: any) => request.post('/datasource/editField', data),
getDs: (id: number) => request.post(`/datasource/get/${id}`),
cancelRequests: () => request.cancelRequests(),
getSchema: (data: any) => request.post('/datasource/getSchemaByConf', data),
syncFields: (id: number) => request.post(`/datasource/syncFields/${id}`),
syncFields: (ds_id: number, id: number) => request.post(`/datasource/syncFields/${ds_id}/${id}`),
exportDsSchema: (id: any) =>
request.get(`/datasource/exportDsSchema/${id}`, {
responseType: 'blob',