novox/mesh-catalog
3
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity

redis: INFO is allowed back — client libraries ask it at connect, and it reads nothing a consumer keeps

Browse Source
This commit is contained in:
jschoubben
2026-09-22 02:03:23 +02:00
parent 421f4d8577
commit c71bbd497f
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
modules/redis/client.ts
+3 -2
View File
@@ -102,10 +102,11 @@ export class RedisClient {
* Minus the dangerous category: a key pattern confines commands that name keys, and FLUSHALL, * Minus the dangerous category: a key pattern confines commands that name keys, and FLUSHALL,
* FLUSHDB, CONFIG, SHUTDOWN and the rest of `@dangerous` name none — with `+@all` alone a * FLUSHDB, CONFIG, SHUTDOWN and the rest of `@dangerous` name none — with `+@all` alone a
* consumer scoped to its own keys could still wipe the server (novox/hq issue 080). KEYS goes * consumer scoped to its own keys could still wipe the server (novox/hq issue 080). KEYS goes
* with them; SCAN stays, and is what a consumer should use anyway. * with them; SCAN stays, and is what a consumer should use anyway. INFO comes back: it is in the
* category, reads nothing a consumer keeps, and several client libraries ask it at connect.
*/ */
async createAclUser(username: string, password: string, keyspacePrefix: string): Promise<void> { async createAclUser(username: string, password: string, keyspacePrefix: string): Promise<void> {
await this.command("ACL", "SETUSER", username, "reset", "on", `>${password}`, `~${keyspacePrefix}:*`, "+@all", "-@dangerous"); await this.command("ACL", "SETUSER", username, "reset", "on", `>${password}`, `~${keyspacePrefix}:*`, "+@all", "-@dangerous", "+info");
} }
async deleteAclUser(username: string): Promise<void> { async deleteAclUser(username: string): Promise<void> {