samwaf 8e4286150d fix(security): structured whitelist for SQL query API (remove raw SQL) ...

- Replace raw SQL execution with a structured query (table/mode/columns/filters/top); backend no longer accepts any SQL string
- Fail-closed table & column whitelist: block sensitive tables (auth/key/cert/config/plugin) and columns (password/secret/token/private/key)
- Block EAV/key-value tables (value/params columns) to prevent plaintext secret leak, e.g. system_configs.value
- Parameterize all filter values via GORM clause expressions; operator whitelist; cap filters/IN length
- Add queryable-schema endpoint + query audit logging; harden GetTableInfo to skip sensitive tables/columns

2026-07-03 16:30:53 +08:00

..

all_host.go

fix: fix the issue of MySql table partitioning not take effect

2026-06-16 11:16:32 +08:00

cc_ip_resp.go

feat:add anticc lock time

2024-11-11 15:08:40 +08:00

host_resp.go

feat:add overview

2026-03-10 16:54:05 +08:00

ip_failure_resp.go

feat: add ip failure

2025-11-21 17:16:53 +08:00

license_res.go

feat:新增集中管理和授权体系

2024-07-12 16:48:19 +08:00

login_res.go

feat:add account rbac

2026-06-29 14:05:09 +08:00

waf_ai_resp.go

feat:add light ai model

2026-06-15 17:00:35 +08:00

waf_analysis_resp.go

feat:spider analysis

2025-05-02 15:43:23 +08:00

waf_db_table_info_resp.go

feat: add database table information

2026-04-07 11:03:37 +08:00

waf_owasp_resp.go

feat:owaspset api

2026-04-24 16:52:53 +08:00

waf_sql_query_resp.go

fix(security): structured whitelist for SQL query API (remove raw SQL)

2026-07-03 16:30:53 +08:00

waf_sql_queryable_resp.go

fix(security): structured whitelist for SQL query API (remove raw SQL)

2026-07-03 16:30:53 +08:00

waf_ssl.go

feat:show all bind host

2025-12-25 15:58:13 +08:00

waf_stat.go

feat:add overview

2026-03-10 16:54:05 +08:00

waf_system_monitor.go

feat:add network

2025-10-30 11:20:58 +08:00

waf_vpconfig_resp.go

feat:manage ssl auto load

2026-06-29 17:08:53 +08:00