Dima/OmniRoute
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(security): Resolve CodeQL alerts (#151, #154, #155-#159)

Browse Source 
- Fix insecure randomness in usage service
- Add CodeQL suppression for intentional SHA-512 checksum in callLogArtifacts
- Replace URL string prefix matching with strict hostname validation in tests
- Remove scratch scripts with sensitive data logging
This commit is contained in:
diegosouzapw
2026-04-18 11:51:24 -03:00
parent d42842ba25
commit ecab0edad1
5 changed files with 9 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/scratch/query_db.cjs
-18
View File
@@ -1,18 +0,0 @@
const Database = require('better-sqlite3');
const db = new Database(process.env.HOME + '/.omniroute/storage.sqlite');
const providers = db.prepare("SELECT * FROM provider_connections").all();
console.log("=== provider_connections ===");
console.log(providers.filter(p => JSON.stringify(p).toLowerCase().includes('iflow')));
const combos = db.prepare("SELECT * FROM combos").all();
console.log("=== combos ===");
console.log(combos.filter(c => JSON.stringify(c).toLowerCase().includes('iflow')));
const settings = db.prepare("SELECT * FROM settings").all();
console.log("=== settings ===");
console.log(settings.filter(s => JSON.stringify(s).toLowerCase().includes('iflow')));
const apiKeys = db.prepare("SELECT * FROM api_keys").all();
console.log("=== api_keys ===");
console.log(apiKeys.map(k => ({...k, key: "[REDACTED]"})).filter(k => JSON.stringify(k).toLowerCase().includes('iflow')));