orneryd / NornicDB / 30379691062

89%

Build Type

push

github

Committed by orneryd

Commit Message

fix(cypher): harden APOC remote fetches and literal fallback quoting

Restrict APOC HTTP(S) loads/imports behind explicit host allowlists in
addition to the existing remote-access gate and SSRF validation, and
route both remote request sinks through a shared request builder.

Also fix the parameter literal fallback path to use the shared Cypher
string quoter so embedded single quotes cannot break out of string
literals.

Coverage Stats

48 of 56 new or added lines in 4 files covered. (85.71%)

11 existing lines in 5 files now uncovered.

147772 of 165725 relevant lines covered (89.17%)

1.04 hits per line