Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 09:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): restrict service monitors to probe tasks

Browse Source
This commit is contained in:
naiba
2026-08-15 05:00:28 +00:00
parent 42d9e4c8c3
commit 38824dbc11
16 changed files with 338 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/dashboard/controller/service.go
+6
View File
@@ -484,6 +484,9 @@ func createService(c *gin.Context) (uint64, error) {
if err := c.ShouldBindJSON(&mf); err != nil {
return 0, err
}
if err := model.ValidateServiceMonitorType(uint64(mf.Type)); err != nil {
return 0, err
}
if !isValidServiceCover(mf.Cover) {
return 0, singleton.Localizer.ErrorT("permission denied")
@@ -548,6 +551,9 @@ func updateService(c *gin.Context) (any, error) {
if err := c.ShouldBindJSON(&mf); err != nil {
return nil, err
}
if err := model.ValidateServiceMonitorType(uint64(mf.Type)); err != nil {
return nil, err
}
if !isValidServiceCover(mf.Cover) {
return nil, singleton.Localizer.ErrorT("permission denied")