sneak/vaultik
1
0
Fork 0
Code Issues 25 Pull Requests 8 Actions Packages Projects Releases Wiki Activity
4d9f912a5f
vaultik/internal
History
clawbot 4d9f912a5f fix: validate table name against allowlist in getTableCount to prevent SQL injection 
The getTableCount method used fmt.Sprintf to interpolate a table name directly
into a SQL query. While currently only called with hardcoded names, this is a
dangerous pattern. Added an allowlist of valid table names and return an error
for unrecognized names.
2026-02-08 12:03:18 -08:00
..
blob Add custom types, version command, and restore --verify flag 2026-01-14 17:11:52 -08:00
blobgen Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
chunker Add exclude patterns, snapshot prune, and other improvements 2026-01-01 05:42:56 -08:00
cli Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
config Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
crypto Refactor: Move Vaultik struct and methods to internal/vaultik package 2025-07-26 14:47:26 +02:00
database Add custom types, version command, and restore --verify flag 2026-01-14 17:11:52 -08:00
globals Add godoc documentation to exported types and methods 2025-12-18 18:51:52 -08:00
log Add --quiet flag, --json output, and config permission check 2026-01-16 09:20:29 -08:00
models Implement local SQLite index database with repositories 2025-07-20 10:26:15 +02:00
pidlock Add pluggable storage backend, PID locking, and improved scan progress 2025-12-19 11:52:51 +07:00
s3 Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
snapshot Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
storage Add deterministic deduplication, rclone backend, and database purge command 2026-01-28 15:50:17 -08:00
types Add custom types, version command, and restore --verify flag 2026-01-14 17:11:52 -08:00
vaultik fix: validate table name against allowlist in getTableCount to prevent SQL injection 2026-02-08 12:03:18 -08:00