github.com/openobserve/openobserve v0.92.0-rc3
malicious npm dependency embedded
JSON value closes quote before shell commandcurl basic auth token credential
SHA-256a7ab44ad5e73edbb124ecdf0b9f9b8f76dd2e2d481e0c92aaf0bb916778c1b3d
Evidence
1"""Shared deterministic data generator for query agent tests.
2
3Used by both conftest.py (test fixture) and compute_counts.py (DuckDB oracle).
4"""
5
6import json
7import random
8from datetime import datetime, timedelta, timezone
9from pathlib import Path
10
11random.seed(42)
12
13# Number of queries this generator produces data for.
14# build_dataset() default must match this value.
15# Must be >= the highest query ID (e.g. Q1000 -> NUM_QUERIES = 1000).
16# Changing this requires re-running comput …
24:27… le__).parent / "base_ts_override.json"
25if _OVERRIDE_FILE.exists():
26 BASE_TS = json.loads(_OVERRIDE_FILE.read_text())["BASE_TS"]
27else:
28 _now = datetime.now(timezone.utc).replace(second=0, microsecond=0)
29 # Anchor BASE_TS 2 hours in the past. Records span forward from th …
499:12… T /favicon.ico",
500 "POST /admin/config",
501 "GET /api/products",
502 "PUT /api/cart/update",
503 "DELETE /api/session",
504 "GET /.env",
505 "POST /api/login {\"user\":\"admin\"}",
506 ],
507
508 "user_agent_str": [
509 "Mozilla/5.0 Chrome/120",
510 "curl/7.88.1",
511 "python-requests/2.31",
512 "Mozilla/5.0 Firefox/121",
513 "PostmanRuntime/7.35",
514 "Mozilla/5.0 Safari/17.2",
515 "axios/1.6.0" …
1135:9… pect(dialogHtml).toContain("test-token-abc123");
1136 });
1137
1138 it("cURL snippet uses Basic auth (curl -u identifier:token), not Bearer", () => {
1139 wrapper.vm.revealToken("the-token", "[email protected]");
1140 const curl = wrapper.vm.tokenCurlSnippet;
1141 // OpenObserve uses HTTP Basic auth, not Bearer toke …
1599:12… json!({"trace_id": "abc-123"}),
1600 json!({"trace_id": "abc-123"}),
1601 json!({"trace_id": "bad';drop"}),
1602 ];
1603
⋯8 lines
Showing the top 5 files — 3 more files (33 regions) not shown.
No evidence locations were recorded for this file. Raw result