opensource/coder
3
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2026-09-23 05:43:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
8cc7f2bb0e0b33199393cc3773c7d691bd2fbf6b
coder/coderd/database/queries
T
History
George KandBobby Ho 8cc7f2bb0e fix(coderd): reject workspace proxy hostname prefixes (#27544) 
A workspace proxy hostname prefix could be accepted as a valid proxy
access URL. An authenticated user could then be redirected to an
attacker-controlled domain with an application-connect API key in the
URL.

Require proxy access URL matches to have a hostname boundary after the
candidate hostname, allowing only the end of the URL, a port, or a
path.

Add regression coverage for proxy access URL and wildcard hostname
prefixes.

Refs: https://linear.app/codercom/issue/PLAT-384

---------

Co-authored-by: Bobby Ho <bobbidinho@gmail.com>
2026-07-28 13:20:59 -07:00
..
activitybump.sql
fix: prevent activity bump for prebuilt workspaces (#19263)
2025-08-20 12:19:14 +01:00
ai_gateway_keys.sql
chore: rename 'last_used_at' column (#26749)
2026-06-26 18:45:37 +02:00
ai_provider_keys.sql
feat: remove legacy chat provider tables (#25416)
2026-05-22 09:50:01 +02:00
ai_providers.sql
feat: add custom AI provider icons and instance-based model picker grouping (#27026)
2026-07-06 23:00:09 +01:00
aibridge.sql
feat: add network calls column to AI sessions table (#27269)
2026-07-21 14:34:23 +02:00
aicostcontrol.sql
feat: add CSV export for AI spend data (#27491)
2026-07-28 10:58:38 +01:00
aiseats.sql
chore: add audit log entry when ai seat is consumed (#22683)
2026-03-16 15:30:25 -05:00
aiseatstate.sql
feat: display the AI add-on column in the UI on the Users and Organization Members tables (#23291)
2026-03-26 10:36:40 +00:00
apikeys.sql
feat: add synthetic gateway keys (#27170)
2026-07-18 20:45:13 +02:00
auditlogs.sql
perf: cap count queries and emit native UUID comparisons for audit/connection logs (#23835)
2026-04-07 07:24:53 -07:00
boundarylogs.sql
feat: add GET /api/v2/agent-firewall/sessions/{id}/logs endpoint (#24816)
2026-06-22 13:56:29 +02:00
boundaryusagestats.sql
fix: make boundary usage telemetry collection atomic (#21907)
2026-02-06 09:52:17 -07:00
chatdebug.sql
feat: add chat debug retention purge (#24943)
2026-05-05 22:37:13 +02:00
chatfiles.sql
fix(coderd): use pasted-text attachments as chat title input (#27067)
2026-07-08 21:37:30 +02:00
chatmodelconfigs.sql
refactor: drop chat_model_configs provider column (#26877)
2026-07-01 15:59:55 +03:00
chats.sql
feat: add chat summary tab in the right sidebar and per-chat cost endpoint (#26649)
2026-07-27 10:05:05 +01:00
connectionlogs.sql
perf: cap count queries and emit native UUID comparisons for audit/connection logs (#23835)
2026-04-07 07:24:53 -07:00
crypto_keys.sql
feat: add endpoint for fetching workspace proxy keys (#14789)
2024-09-26 21:01:49 +01:00
dbcrypt.sql
…
externalauth.sql
fix(externalauth): prevent race condition in token refresh with optimistic locking (#22904)
2026-03-10 13:52:55 -04:00
files.sql
chore(db): remove 23 unused database methods (#22999)
2026-03-12 21:32:57 +00:00
gitsshkeys.sql
feat: encrypt gitsshkeys.private_key at rest via dbcrypt (#25872)
2026-06-02 08:36:01 -06:00
groupmembers.sql
feat: search users by display name (#27398)
2026-07-28 12:13:58 -07:00
groups.sql
fix: drop N+1 db query on template ACL available (#25465)
2026-05-20 22:40:50 +00:00
insights.sql
fix: user status change chart accommodates DST (#22191)
2026-03-04 12:54:39 +02:00
licenses.sql
chore: replace GetManagedAgentCount query with aggregate table (#19636)
2025-08-30 03:39:37 +10:00
lock.sql
…
mcpserverconfigs.sql
feat: revoke MCP server OAuth grants at the provider on disconnect (#27300)
2026-07-20 00:14:03 +02:00
notifications.sql
fix: recover web push subscriptions after PWA reinstall (#24720)
2026-04-26 14:49:10 -07:00
notificationsinbox.sql
feat(coderd): add mark-all-as-read endpoint for inbox notifications (#16976)
2025-03-20 13:41:54 +01:00
oauth2.sql
chore(db): remove 23 unused database methods (#22999)
2026-03-12 21:32:57 +00:00
organizationmembers.sql
feat: search users by display name (#27398)
2026-07-28 12:13:58 -07:00
organizations.sql
feat: configurable default org member roles (#25994)
2026-06-05 14:33:13 -05:00
parameterschemas.sql
…
prebuilds.sql
feat: add prebuild invalidation via last_invalidated_at timestamp (#20582)
2025-11-20 17:12:25 +01:00
presets.sql
feat: add prebuild invalidation via last_invalidated_at timestamp (#20582)
2025-11-20 17:12:25 +01:00
provisionerdaemons.sql
chore(coderd/database/queries): remove trailing whitespace (#20192)
2025-10-07 13:10:38 +00:00
provisionerjoblogs.sql
chore(coderd/database/queries): remove trailing whitespace (#20192)
2025-10-07 13:10:38 +00:00
provisionerjobs.sql
feat: add workspace build transition to provisioner job list (#24131)
2026-04-10 09:50:11 -05:00
provisionerkeys.sql
chore(coderd/database/queries): remove trailing whitespace (#20192)
2025-10-07 13:10:38 +00:00
proxies.sql
fix(coderd): reject workspace proxy hostname prefixes (#27544)
2026-07-28 13:20:59 -07:00
quotas.sql
chore: remove excess join in GetQuotaConsumedForUser query (#15338)
2024-11-05 08:12:56 -06:00
README.md
…
replicas.sql
chore: add replica_host and nats_port to replicas table (#26665)
2026-06-24 15:04:04 -04:00
roles.sql
feat(coderd/rbac): make organization-member a per-org system custom role (#21359)
2026-01-12 18:19:19 -08:00
siteconfig.sql
feat: allow admins to override the chat compaction model (#27151)
2026-07-14 16:57:04 +02:00
tailnet.sql
feat: replace pgcoordinator pg_notify triggers with app-level Publish() (#24717)
2026-05-01 15:00:08 -05:00
tasks.sql
feat: add telemetry for task lifecycle events (#21922)
2026-02-24 17:04:42 +00:00
telemetryitems.sql
chore: track the first time html is served in telemetry (#16334)
2025-01-31 13:55:46 +01:00
telemetrylocks.sql
chore: add aibridge data to telemetry (#20449)
2025-10-28 03:16:41 +11:00
templates.sql
feat: plumb time_til_autostop_notify template field (#26439)
2026-06-23 17:32:47 -05:00
templateversionparameters.sql
chore: add form_type parameter argument to db (#17920)
2025-05-29 08:55:19 -05:00
templateversions.sql
chore(db): remove 23 unused database methods (#22999)
2026-03-12 21:32:57 +00:00
templateversionterraformvalues.sql
fix(coderd): scope provisioner module file downloads to the daemon's org (#26635)
2026-06-24 12:09:22 -05:00
templateversionvariables.sql
fix(coderd/database): sort template version variables and fix test flake (#21233)
2025-12-12 11:41:46 +00:00
templateversionworkspacetags.sql
feat: store coder_workspace_tags in the database (#13294)
2024-05-20 13:30:19 +00:00
testadmin.sql
chore(coderd/database/queries): remove trailing whitespace (#20192)
2025-10-07 13:10:38 +00:00
usageevents.sql
chore: add tallyman events for ai seat tracking (#22689)
2026-03-18 09:30:22 -05:00
user_ai_provider_keys.sql
feat: add AI provider schema expansion (#25412)
2026-05-22 02:16:01 +02:00
user_links.sql
feat: implement package and cli tool for repairing oidc links (#26418)
2026-06-16 12:46:10 -07:00
user_secrets.sql
feat: add enable/disable support for user secrets (#27537)
2026-07-28 09:58:33 -06:00
user_skills.sql
feat: add personal skill storage, API, and SDK (#25363)
2026-05-20 00:09:09 +02:00
users.sql
feat: search users by display name (#27398)
2026-07-28 12:13:58 -07:00
workspaceagentcontext.sql
feat: persist agent-pushed workspace context snapshots in coderd (#26145)
2026-06-15 09:38:52 -07:00
workspaceagentdevcontainers.sql
feat(coderd/provisionerdserver): insert sub agent resource (#21699)
2026-01-30 17:19:19 +00:00
workspaceagentportshare.sql
feat: allow setting port share protocol (#12383)
2024-03-06 09:23:57 -05:00
workspaceagentresourcemonitors.sql
chore: track workspace resource monitors in telemetry (#16776)
2025-03-03 18:41:01 +01:00
workspaceagents.sql
fix: use backend-selected chat agent for desktop, git, terminal (#26959)
2026-07-14 13:50:25 +01:00
workspaceagentstats.sql
chore(db): remove 23 unused database methods (#22999)
2026-03-12 21:32:57 +00:00
workspaceappaudit.sql
fix(coderd/workspaceapps): prevent race in workspace app audit session updates (#17020)
2025-03-20 14:10:45 +00:00
workspaceapps.sql
fix: stabilize latest workspace app status ordering (DEVEX-381) (#27041)
2026-07-14 11:48:31 +10:00
workspaceappstats.sql
…
workspacebuildorchestrations.sql
feat: add workspace restart functionality to API (#25757)
2026-07-07 09:18:30 -07:00
workspacebuildparameters.sql
chore(db): remove 23 unused database methods (#22999)
2026-03-12 21:32:57 +00:00
workspacebuilds.sql
feat: notify users before workspace autostop (#26676)
2026-06-26 01:25:23 -05:00
workspacemodules.sql
chore: track terraform modules in telemetry (#15450)
2024-11-16 21:56:19 +01:00
workspaceresources.sql
chore: track terraform modules in telemetry (#15450)
2024-11-16 21:56:19 +01:00
workspaces.sql
feat: skip autostop reminder for active workspaces (#26772)
2026-06-30 00:24:29 -05:00
workspacescripts.sql
feat: add exit code and status to workspace agent scripts (#24505)
2026-04-29 12:24:26 -08:00

README.md

queries

Database queries are generated using sqlc. See: sqlc docs

Run make gen to generate models and query functions.

Reference in New Issue View Git Blame Copy Permalink