SigNoz/signoz

Move db calls to prepared statements with context

オープン

#1,353 opened on 2022/07/04

 (11 件のコメント) (0 件のリアクション) (1 人の担当者)TypeScript (976 件のフォーク)batch import
backendgood first issue

Repository metrics

Stars
 (16,037 個のスター)
PR merge metrics
 (平均マージ 5d 22h) (30d で 224 merged PRs)

説明

Move all db calls to prepared statements and specifically with context if possible to make signoz more secure from sql injections. A query should not be a string prepared from fmt.sprintf(...) if it has args to pass. We should try to avoid string formatting for args.

コントリビューターガイド