Git Product home page Git Product logo

Comments (4)

drivebyer avatar drivebyer commented on June 9, 2024

缺陷原因:
SQLE 接受 scanner 上传 SQL 时,未对上传的 Token 和审核计划名做一致性校验。

修复方案:
ScannerVerifier 拦截器中增加校验,校验请求的 审核计划的 token 是否和数据库中未删除的审核计划的 token 一致。

from sqle.

HuangWeiCen avatar HuangWeiCen commented on June 9, 2024

发现一个延申问题, 审核计划删掉再重新创建一个同名计划后, 审核执行时的任务报告ID(audit_plan_report_id)不会清零,而是从之前的那个审核计划的最后一个报告ID继续往下计数

from sqle.

Marcus9530 avatar Marcus9530 commented on June 9, 2024

验证版本
UI Version: release-1.2201.x 0ad3134
Server Version: release-1.2201.x-ee 892ff4c7c3
验证步骤:
1.新建一个审核任务,然后在gitlab上进行变更,触发jenkins的编译
2.在sqle上删除这个审核任务,然后新建一个审核任务,此时jenkins的token和新审核任务的不一致,不应该会继续推送sql语句信息
3.观测jenkins的编译,控制台输出信息提示token检查不一致,sqle上新建审核任务也没有收到新的sql语句信息

image
image
image

from sqle.

Marcus9530 avatar Marcus9530 commented on June 9, 2024

验证版本
UI Version: release-1.2201.x 0ad3134
Server Version: release-1.2201.x-ee 892ff4c7c3
验证步骤:
1.新建一个审核任务,然后在gitlab上进行变更,触发jenkins的编译
2.在sqle上删除这个审核任务,然后新建一个审核任务,此时jenkins的token和新审核任务的不一致,不应该会继续推送sql语句信息
3.观测jenkins的编译,控制台输出信息提示token检查不一致,sqle上新建审核任务也没有收到新的sql语句信息

image
image
image

from sqle.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.