Re: [pgAdmin4][Patch]: SonarQube Vulnerabilities - Mailing list pgadmin-hackers

From Dave Page
Subject Re: [pgAdmin4][Patch]: SonarQube Vulnerabilities
Date
Msg-id CA+OCxozk8=FunZp6fkfUaDT3+S5+K+1jT2OvY0mEG_o-6Lc_Bg@mail.gmail.com
Whole thread Raw
In response to [pgAdmin4][Patch]: SonarQube Vulnerabilities  (Khushboo Vashi <khushboo.vashi@enterprisedb.com>)
List pgadmin-hackers
Hi

On Wed, 14 Sept 2022 at 05:38, Khushboo Vashi <khushboo.vashi@enterprisedb.com> wrote:
Hi,

I have tried to fix the vulnerabilities reported by SonarQube but it didn't work. So I added the verification of region_id (user defined input) as discussed in yesterday's meeting and am going to close these issues.

I've cleared the first two issues on SonarQube as it doesn't detect the validation. However, we also need to validate the volume type specified in the third.

--

pgadmin-hackers by date:

Previous
From: Akshay Joshi
Date:
Subject: Re: [pgAdmin 4][Patch]: #7314 - psycopg2 to psycopg3 migration
Next
From: Aditya Toshniwal
Date:
Subject: [pgAdmin][RM7557] pgAdmin failed to start due to bin path migration