GO-2024-2675 : Temporal UI Server cross-site scripting vulnerability in github.com/temporalio/ui-server
Discover Packages
github.com/temporalio/ui-server/v2
module
Version:
v2.7.1
Opens a new window with list of versions in this module.
Published: Oct 12, 2022
License: MIT
Opens a new window with license information.
README
README
¶
ui-server
ui-server serves an HTTP API analogue of Temporal gRPC API as well as serves Temporal UI https://github.com/temporalio/ui . It can be compiled into a binary or consumed as a Go library.
Docker
ui-server is published on Docker Hub: https://hub.docker.com/r/temporalio/ui
You can run it with Temporal Server using the Temporal docker-compose .
Configuration
Check out the configuration docs for more details
Development
Pre-requirements:
Go v1.18 or later installed on your development machine
Protobuf installed on your development machine (brew install protobuf
) (Note: M1 macs will need /opt/homebrew/bin
on the PATH or you may get /bin/sh: protoc: command not found
errors (or you can manually download protoc ))
Execute from the project folder to build a binary:
make build-server
To start the server, execute
./ui-server start
Debugging
In VSCode launch "Debug Server" script (or press F5)
Expand ▾
Collapse ▴
Directories
¶
cmd
plugins
Package workflowservice is a reverse proxy.
Click to show internal directories.
Click to hide internal directories.