当我使用6060端口的ui管理工具,操作tdengine的时候,会被防火墙判断为SQL注入,导致封IP
Open
Nobody has claimed this yet.
bug
- Dominant language
- C
- Stars
- 25.1k
- Forks
- 5k
- Avg merge
- 4d 59m
- Merged PRs (30d)
- 7
Description
当我使用6060端口的ui管理工具,操作tdengine的时候,会被防火墙判断为SQL注释,导致封IP
该网页提供的查询功能,直接在url中明文传输selec语句,能否加一层加密,防止被防火墙误判为SQL注入
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the TDengine UI on port 6060 and how its query function places SQL text in the URL. Reproduce the reported firewall block and identify the request flow involved. Done means the UI no longer triggers the reported false positive while query operations continue to work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- sql
- Domain
- databases, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100