samwaf 8e4286150d fix(security): structured whitelist for SQL query API (remove raw SQL) ...

- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns

2026-07-03 16:30:53 +08:00

..

center_client_detail_req.go

add:提供中心控制部分代码

2024-07-05 17:21:08 +08:00

center_client_search.go

add:提供中心控制部分代码

2024-07-05 17:21:08 +08:00

center_client_update_req.go

add:提供中心控制完善部分代码

2024-07-07 00:23:05 +08:00

waf_account_log_detail_req.go

增加账号管理和日志的基本内容

2023-02-02 11:21:28 +08:00

waf_account_log_search.go

增加账号管理和日志的基本内容

2023-02-02 11:21:28 +08:00

waf_account_req.go

feat:add account rbac

2026-06-29 14:05:09 +08:00

waf_ai_req.go

feat:add light ai model

2026-06-15 17:00:35 +08:00

waf_allow_ip_req.go

fix:empty

2026-04-16 14:41:40 +08:00

waf_allow_url_req.go

fix:empty

2026-04-16 14:41:40 +08:00

waf_analysis_req.go

feat:spider analysis

2025-05-02 15:43:23 +08:00

waf_anticc_req.go

feat: add skip global cc

2026-04-17 10:14:30 +08:00

waf_app_req.go

feat:strengthen the safety operation of the application management

2026-06-09 17:31:53 +08:00

waf_attack_log_req.go

fix: fix the issue of MySql table partitioning not take effect

2026-06-16 11:16:32 +08:00

waf_batchtask_req.go

feat:add batch sensitive

2025-06-04 08:42:27 +08:00

waf_block_ip_req.go

fix:empty

2026-04-16 14:41:40 +08:00

waf_block_url_req.go

fix:empty

2026-04-16 14:41:40 +08:00

waf_blockingpage_req.go

feat:custom page support attack_type / http code 444 disconnected con

2026-01-09 09:19:22 +08:00

waf_cacherule_req.go

feat:cache file allinone

2025-05-13 08:43:09 +08:00

waf_caserverinfo_req.go

feat:customize acme server

2025-08-27 11:10:06 +08:00

waf_common_req.go

增加了一些测试用例和检查升级的一部分代码

2023-06-21 18:05:43 +08:00

waf_data_retention_req.go

feat: data cleaning strategy

2026-04-11 08:17:28 +08:00

waf_db_table_info_req.go

feat: add database table information

2026-04-07 11:03:37 +08:00

waf_firewall_ip_block_req.go

feat:add system firewall

2025-12-01 16:32:42 +08:00

waf_gpt_send_req.go

feat:init deepseek chatgpt

2025-02-17 15:51:44 +08:00

waf_host_path_rule_req.go

feat:path rule backend protocol, access log switch and response timeout

2026-07-02 15:59:11 +08:00

waf_host_req.go

feat:file upload detection config

2026-07-02 11:31:43 +08:00

waf_httpauthbase_req.go

feat:visit by password

2025-01-06 09:42:13 +08:00

waf_ip_failure_req.go

feat: add ip failure

2025-11-21 17:16:53 +08:00

waf_ldp_url_req.go

feat:ldp url batch delete

2025-08-22 10:04:33 +08:00

waf_license_confirm_req.go

feat:新增集中管理和授权体系

2024-07-12 16:48:19 +08:00

waf_license_detail_req.go

feat:新增集中管理和授权体系

2024-07-12 16:48:19 +08:00

waf_loadbalance_add_req.go

feat:add loadbalance

2024-09-27 16:55:58 +08:00

waf_loadbalance_del_req.go

feat:add loadbalance

2024-09-27 16:55:58 +08:00

waf_loadbalance_detail_req.go

feat:add loadbalance

2024-09-27 16:55:58 +08:00

waf_loadbalance_edit_req.go

feat:add loadbalance

2024-09-27 16:55:58 +08:00

waf_loadbalance_search.go

feat:add loadbalance

2024-09-27 16:55:58 +08:00

waf_login_out_req.go

完善登录和鉴权基础版本，后续精细化控制

2023-02-03 11:06:19 +08:00

waf_login_req.go

feat:2fa

2025-02-26 13:39:25 +08:00

waf_notify_channel_req.go

feat:add notice manager

2025-11-25 09:07:21 +08:00

waf_notify_log_req.go

feat:add notice manager

2025-11-25 09:07:21 +08:00

waf_notify_subscription_req.go

feat:add recipient mail

2026-01-30 17:20:41 +08:00

waf_onekeymod_req.go

feat:add one key modify restore

2025-11-04 15:20:21 +08:00

waf_oplatform_key_req.go

feat:add open platform

2026-03-06 17:39:01 +08:00

waf_oplatform_log_req.go

feat:add open platform

2026-03-06 17:39:01 +08:00

waf_otp_req.go

feat: add issuer field to 2fa

2026-01-09 11:19:18 +08:00

waf_owasp_req.go

feat:owaspset api

2026-04-24 16:52:53 +08:00

waf_privategroup_req.go

feat:add same cloud multiple accounts

2025-05-28 09:41:12 +08:00

waf_privateinfo_req.go

feat:add same cloud multiple accounts

2025-05-28 09:41:12 +08:00

waf_rule_req.go

feat:add rule test

2026-02-05 16:07:30 +08:00

waf_sensitive_req.go

feat:add batch del sensitive

2025-08-01 13:49:49 +08:00

waf_sharedb_search.go

feat:增加日志归档能力

2023-12-29 16:38:31 +08:00

waf_sql_query_req.go

fix(security): structured whitelist for SQL query API (remove raw SQL)

2026-07-03 16:30:53 +08:00

waf_ssl_req.go

feat:manage ssl auto load

2026-06-29 17:08:53 +08:00

waf_sslexpire_req.go

feat:ssl expire check

2025-01-03 13:54:03 +08:00

waf_sslorder_req.go

feat: skip dns local check

2026-03-25 15:10:54 +08:00

waf_stats_analysis_day_range_country_req.go

feat:增加世界地图识别 部分代码

2023-11-16 15:50:29 +08:00

waf_stats_day_range_req.go

增加首页看盘统计区间数据的处理

2022-12-02 14:45:47 +08:00

waf_stats_site_req.go

feat:add overview

2026-03-10 16:54:05 +08:00

waf_sys_log_detail_req.go

增加系统日志

2023-03-29 14:50:10 +08:00

waf_sys_log_search.go

增加系统日志

2023-03-29 14:50:10 +08:00

waf_system_config_req.go

fix: https jump

2026-02-06 10:37:26 +08:00

waf_tamperrule_req.go

feat:tamper url extract, batch ops, table filter/sort

2026-07-01 16:43:15 +08:00

waf_task_req.go

feat:cache file

2025-05-12 17:23:40 +08:00

waf_tunnel_req.go

feat:tunnel support ssl

2026-03-17 14:31:39 +08:00

waf_vpconfig_req.go

feat:manage ssl auto load

2026-06-29 17:08:53 +08:00