Reworking project to support Python 3 #72
Conversation
* changed structure for libraries and code * rewrote queries without ORM * reworked config file * added debug options for current development steps
* changed graph engine to Plotly * added functions that generate JSON for Plotly * changed way how application information is stored and used in templates * added healthcheck and environment information endpoints
* removed included javascript that is not used * fixed tabs in old volumes report
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| WHERE | ||
| client.clientid = job.clientid AND job.name = '{}' AND job.schedtime = '{}' | ||
| """.format(host_name, bdate) | ||
| _short_res = db.execute(query).fetchall() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
| WHERE | ||
| job.name = '{}' AND job.jobid = file.jobid AND job.schedtime = '{}' AND filename.filenameid = file.filenameid AND path.pathid = file.pathid | ||
| """.format(host_name, bdate) | ||
| f_res = db.execute(f_sel).fetchall() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
| m.volumename = '""" + media + """'; | ||
| """ | ||
|
|
||
| _media_info_result = db.execute(media_info_query).fetchone() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
| m.volumename; | ||
| """ | ||
|
|
||
| job_inside_media_result = db.execute(job_inside_media_query).fetchall() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
| if fname == 'index': | ||
| return redirect("/", code=302) | ||
| else: | ||
| fi = open(custom_path + fname + ".html", 'r') |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression
| client.clientid = jh.clientid AND jh.schedtime > NOW() - INTERVAL '14 days' AND jh.name = '{}' | ||
| ORDER BY schedtime | ||
| """.format(host_name, host_name) | ||
| result = db.execute(query).fetchall() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
| GROUP BY | ||
| pool.name, job.schedtime | ||
| """.format(bddate, bddate) | ||
| bd = db.execute(query).fetchall() |
Check failure
Code scanning / CodeQL
SQL query built from user-controlled sources
Preparing version 0.3.0