Skip to content

sql-storage-adapter v0.7.12

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 23:25
· 231 commits to master since this release
v0.7.12
dc16147
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • PostgresExporter starts pg_dump with execFile and an argument array instead of a shell string, so a quote, $(...) or ; in the output path or the connection string can no longer run a command; a postgres:// URL's password reaches pg_dump in PGPASSWORD and no longer shows in the process list. pgDumpInvocation(connectionString, outputPath?) builds the invocation.

Fixed

  • The Electron main adapter's cloud backup doubles the quotes of its VACUUM INTO path, so a database under a folder with an apostrophe backs up.
Assets 2
Loading