You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Enhancement/alternative data export format ( postgres update req. ) #1574
Hey @Hackerberg43 indeed you are correct that the SQL is trivial but I think just replacing the existing export with this isn't the correct approach and instead we need to provide UI & REST API options to allow choosing export format as existing mechanism is used by users.
o/ , I tried some SQL injections with assetnames but didn't manage to get one executing. Did you find a specific exploit or is it a defensive measure ?
Activity
Hackerberg43 commentedon Jan 13, 2025
@richturner The only sql command required for the alternative format to work is CREATE EXTENSION IF NOT EXISTS tablefunc; , couldn't adding this to https://github.com/openremote/openremote/tree/master/manager/src/main/resources/org/openremote/manager/setup/database
simply fix this without needing a new postgres image ?
richturner commentedon Jan 20, 2025
Hey @Hackerberg43 indeed you are correct that the SQL is trivial but I think just replacing the existing export with this isn't the correct approach and instead we need to provide UI & REST API options to allow choosing export format as existing mechanism is used by users.
Ekhorn commentedon Feb 12, 2026
The following will conflict with #2514
I'll resolve the conflictsHackerberg43 commentedon Feb 12, 2026
o/ , I tried some SQL injections with assetnames but didn't manage to get one executing. Did you find a specific exploit or is it a defensive measure ?