Affected by GO-2022-0342 and 25 other vulnerabilities

GO-2022-0342: Grafana XSS in Dashboard Text Panel in github.com/grafana/grafana

GO-2022-0707: Grafana Authentication Bypass in github.com/grafana/grafana

GO-2024-2483: Grafana XSS via adding a link in General feature in github.com/grafana/grafana

GO-2024-2510: Grafana Cross-site Scripting (XSS) in github.com/grafana/grafana

GO-2024-2513: Grafana information disclosure in github.com/grafana/grafana

GO-2024-2515: Grafana XSS via the OpenTSDB datasource in github.com/grafana/grafana

GO-2024-2516: Grafana XSS via a column style in github.com/grafana/grafana

GO-2024-2517: Grafana XSS in header column rename in github.com/grafana/grafana

GO-2024-2519: Grafana world readable configuration files in github.com/grafana/grafana

GO-2024-2520: Grafana XSS via a query alias for the ElasticSearch datasource in github.com/grafana/grafana

GO-2024-2523: Grafana stored XSS in github.com/grafana/grafana

GO-2024-2629: Grafana's users with permissions to create a data source can CRUD all data sources in github.com/grafana/grafana

GO-2024-2661: Arbitrary file read in github.com/grafana/grafana

GO-2024-2697: Grafana: Users outside an organization can delete a snapshot with its key in github.com/grafana/grafana

GO-2024-2843: Grafana Email addresses and usernames can not be trusted in github.com/grafana/grafana

GO-2024-2844: Grafana User enumeration via forget password in github.com/grafana/grafana

GO-2024-2847: Grafana Escalation from admin to server admin when auth proxy is used in github.com/grafana/grafana

GO-2024-2848: Grafana when using email as a username can block other users from signing in in github.com/grafana/grafana

GO-2024-2851: Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana

GO-2024-2852: Grafana account takeover via OAuth vulnerability in github.com/grafana/grafana

GO-2024-2854: Grafana folders admin only permission privilege escalation in github.com/grafana/grafana

GO-2024-2855: Grafana Plugin signature bypass in github.com/grafana/grafana

GO-2024-2856: Grafana Race condition allowing privilege escalation in github.com/grafana/grafana

GO-2024-2857: Grafana Stored Cross-site Scripting in Unified Alerting in github.com/grafana/grafana

GO-2024-2867: Grafana Spoofing originalUrl of snapshots in github.com/grafana/grafana

GO-2024-3079: Grafana plugin data sources vulnerable to access control bypass in github.com/grafana/grafana

publicdashboards

package

v0.0.1-test Latest Latest Go to latest Published: Oct 6, 2022 License: AGPL-3.0 Imports: 8 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/grafana/grafana

Documentation ¶

Index ¶

type FakePublicDashboardService
- func NewFakePublicDashboardService(t testing.TB) *FakePublicDashboardService
type FakePublicDashboardStore
- func NewFakePublicDashboardStore(t testing.TB) *FakePublicDashboardStore
type Service
type Store

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type FakePublicDashboardService ¶

type FakePublicDashboardService struct {
	mock.Mock
}

FakePublicDashboardService is an autogenerated mock type for the Service type

func NewFakePublicDashboardService ¶

func NewFakePublicDashboardService(t testing.TB) *FakePublicDashboardService

NewFakePublicDashboardService creates a new instance of FakePublicDashboardService. It also registers the testing.TB interface on the mock and a cleanup function to assert the mocks expectations.

func (*FakePublicDashboardService) AccessTokenExists ¶

func (_m *FakePublicDashboardService) AccessTokenExists(ctx context.Context, accessToken string) (bool, error)

AccessTokenExists provides a mock function with given fields: ctx, accessToken

func (*FakePublicDashboardService) BuildAnonymousUser ¶

func (_m *FakePublicDashboardService) BuildAnonymousUser(ctx context.Context, dashboard *models.Dashboard) (*user.SignedInUser, error)

BuildAnonymousUser provides a mock function with given fields: ctx, dashboard

func (*FakePublicDashboardService) GetDashboard ¶

func (_m *FakePublicDashboardService) GetDashboard(ctx context.Context, dashboardUid string) (*models.Dashboard, error)

GetDashboard provides a mock function with given fields: ctx, dashboardUid

func (*FakePublicDashboardService) GetMetricRequest ¶

func (_m *FakePublicDashboardService) GetMetricRequest(ctx context.Context, dashboard *models.Dashboard, publicDashboard *publicdashboardsmodels.PublicDashboard, panelId int64, reqDTO publicdashboardsmodels.PublicDashboardQueryDTO) (dtos.MetricRequest, error)

GetMetricRequest provides a mock function with given fields: ctx, dashboard, publicDashboard, panelId, reqDTO

func (*FakePublicDashboardService) GetPublicDashboard ¶

func (_m *FakePublicDashboardService) GetPublicDashboard(ctx context.Context, accessToken string) (*publicdashboardsmodels.PublicDashboard, *models.Dashboard, error)

GetPublicDashboard provides a mock function with given fields: ctx, accessToken

func (*FakePublicDashboardService) GetPublicDashboardConfig ¶

func (_m *FakePublicDashboardService) GetPublicDashboardConfig(ctx context.Context, orgId int64, dashboardUid string) (*publicdashboardsmodels.PublicDashboard, error)

GetPublicDashboardConfig provides a mock function with given fields: ctx, orgId, dashboardUid

func (*FakePublicDashboardService) GetQueryDataResponse ¶

func (_m *FakePublicDashboardService) GetQueryDataResponse(ctx context.Context, skipCache bool, reqDTO publicdashboardsmodels.PublicDashboardQueryDTO, panelId int64, accessToken string) (*backend.QueryDataResponse, error)

GetQueryDataResponse provides a mock function with given fields: ctx, skipCache, reqDTO, panelId, accessToken

func (*FakePublicDashboardService) PublicDashboardEnabled ¶

func (_m *FakePublicDashboardService) PublicDashboardEnabled(ctx context.Context, dashboardUid string) (bool, error)

PublicDashboardEnabled provides a mock function with given fields: ctx, dashboardUid

func (*FakePublicDashboardService) SavePublicDashboardConfig ¶

func (_m *FakePublicDashboardService) SavePublicDashboardConfig(ctx context.Context, u *user.SignedInUser, dto *publicdashboardsmodels.SavePublicDashboardConfigDTO) (*publicdashboardsmodels.PublicDashboard, error)

SavePublicDashboardConfig provides a mock function with given fields: ctx, u, dto

type FakePublicDashboardStore ¶

type FakePublicDashboardStore struct {
	mock.Mock
}

FakePublicDashboardStore is an autogenerated mock type for the Store type

func NewFakePublicDashboardStore ¶

func NewFakePublicDashboardStore(t testing.TB) *FakePublicDashboardStore

NewFakePublicDashboardStore creates a new instance of FakePublicDashboardStore. It also registers the testing.TB interface on the mock and a cleanup function to assert the mocks expectations.

func (*FakePublicDashboardStore) AccessTokenExists ¶

func (_m *FakePublicDashboardStore) AccessTokenExists(ctx context.Context, accessToken string) (bool, error)

AccessTokenExists provides a mock function with given fields: ctx, accessToken

func (*FakePublicDashboardStore) GenerateNewPublicDashboardUid ¶

func (_m *FakePublicDashboardStore) GenerateNewPublicDashboardUid(ctx context.Context) (string, error)

GenerateNewPublicDashboardUid provides a mock function with given fields: ctx

func (*FakePublicDashboardStore) GetDashboard ¶

func (_m *FakePublicDashboardStore) GetDashboard(ctx context.Context, dashboardUid string) (*models.Dashboard, error)

GetDashboard provides a mock function with given fields: ctx, dashboardUid

func (*FakePublicDashboardStore) GetPublicDashboard ¶

func (_m *FakePublicDashboardStore) GetPublicDashboard(ctx context.Context, accessToken string) (*publicdashboardsmodels.PublicDashboard, *models.Dashboard, error)

GetPublicDashboard provides a mock function with given fields: ctx, accessToken

func (*FakePublicDashboardStore) GetPublicDashboardByUid ¶

func (_m *FakePublicDashboardStore) GetPublicDashboardByUid(ctx context.Context, uid string) (*publicdashboardsmodels.PublicDashboard, error)

GetPublicDashboardByUid provides a mock function with given fields: ctx, uid

func (*FakePublicDashboardStore) GetPublicDashboardConfig ¶

func (_m *FakePublicDashboardStore) GetPublicDashboardConfig(ctx context.Context, orgId int64, dashboardUid string) (*publicdashboardsmodels.PublicDashboard, error)

GetPublicDashboardConfig provides a mock function with given fields: ctx, orgId, dashboardUid

func (*FakePublicDashboardStore) PublicDashboardEnabled ¶

func (_m *FakePublicDashboardStore) PublicDashboardEnabled(ctx context.Context, dashboardUid string) (bool, error)

PublicDashboardEnabled provides a mock function with given fields: ctx, dashboardUid

func (*FakePublicDashboardStore) SavePublicDashboardConfig ¶

func (_m *FakePublicDashboardStore) SavePublicDashboardConfig(ctx context.Context, cmd publicdashboardsmodels.SavePublicDashboardConfigCommand) error

SavePublicDashboardConfig provides a mock function with given fields: ctx, cmd

func (*FakePublicDashboardStore) UpdatePublicDashboardConfig ¶

func (_m *FakePublicDashboardStore) UpdatePublicDashboardConfig(ctx context.Context, cmd publicdashboardsmodels.SavePublicDashboardConfigCommand) error

UpdatePublicDashboardConfig provides a mock function with given fields: ctx, cmd

type Service ¶

type Service interface {
	AccessTokenExists(ctx context.Context, accessToken string) (bool, error)
	BuildAnonymousUser(ctx context.Context, dashboard *models.Dashboard) (*user.SignedInUser, error)
	GetPublicDashboard(ctx context.Context, accessToken string) (*PublicDashboard, *models.Dashboard, error)
	GetDashboard(ctx context.Context, dashboardUid string) (*models.Dashboard, error)
	GetMetricRequest(ctx context.Context, dashboard *models.Dashboard, publicDashboard *PublicDashboard, panelId int64, reqDTO PublicDashboardQueryDTO) (dtos.MetricRequest, error)
	GetPublicDashboardConfig(ctx context.Context, orgId int64, dashboardUid string) (*PublicDashboard, error)
	GetQueryDataResponse(ctx context.Context, skipCache bool, reqDTO PublicDashboardQueryDTO, panelId int64, accessToken string) (*backend.QueryDataResponse, error)
	PublicDashboardEnabled(ctx context.Context, dashboardUid string) (bool, error)
	SavePublicDashboardConfig(ctx context.Context, u *user.SignedInUser, dto *SavePublicDashboardConfigDTO) (*PublicDashboard, error)
}

type Store ¶

type Store interface {
	AccessTokenExists(ctx context.Context, accessToken string) (bool, error)
	GetDashboard(ctx context.Context, dashboardUid string) (*models.Dashboard, error)
	GenerateNewPublicDashboardUid(ctx context.Context) (string, error)
	GetPublicDashboard(ctx context.Context, accessToken string) (*PublicDashboard, *models.Dashboard, error)
	GetPublicDashboardByUid(ctx context.Context, uid string) (*PublicDashboard, error)
	GetPublicDashboardConfig(ctx context.Context, orgId int64, dashboardUid string) (*PublicDashboard, error)
	PublicDashboardEnabled(ctx context.Context, dashboardUid string) (bool, error)
	SavePublicDashboardConfig(ctx context.Context, cmd SavePublicDashboardConfigCommand) error
	UpdatePublicDashboardConfig(ctx context.Context, cmd SavePublicDashboardConfigCommand) error
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
api
database
internal
models
queries
service
validation

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL