Skip to content

Security: Sync Manager Information Disclosure Protection#2964

Closed
MichaelSovereign wants to merge 104 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/sync-schema-probing
Closed

Security: Sync Manager Information Disclosure Protection#2964
MichaelSovereign wants to merge 104 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/sync-schema-probing

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR hardens the synchronization manager by preventing information disclosure about unauthorized database tables.

Changes

  1. Schema Access Control: Updated to only process requests for tables that are explicitly in the sync whitelist ( or ). This prevents an attacker or malicious peer from probing the structure of internal tables (e.g., , admin logs) through the schema loading logic.
  2. Defensive Logic: Aligned schema discovery with the strict table whitelisting enforced in other parts of the manager.

Closes #7440

…event connectivity issues with outdated certs
…o prevent rewards from known abusive addresses
@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 06:13
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related tests Test suite changes size/XL PR: 500+ lines labels May 2, 2026
@Scottcjn
Copy link
Copy Markdown
Owner

Scottcjn commented May 3, 2026

Closing as part of Tier 0 hard-ban cleanup — see #3074 / #3104 / #3169 for the documented incident chain. All MichaelSovereign PRs are closed unread per the Tier 0 contract. No review path; no future PRs from this account will be processed. (See feedback_michaelsovereign_tier0_2026-05-02.md.)

@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related size/XL PR: 500+ lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants