crowetic/protocol
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check for special characters in table name in pull_missing_events

Browse Source
This commit is contained in:
Alex Browne
2018-11-16 13:16:17 -08:00
parent 24fd2d9730
commit 5cad2ad174
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
packages/pipeline/src/scripts/pull_missing_events.ts
View File

@@ -64,16 +64,20 @@ async function getCancelUpToEventsAsync(eventsSource: ExchangeEventsSource): Pro
await saveEventsAsync(startBlock === EXCHANGE_START_BLOCK, repository, events); await saveEventsAsync(startBlock === EXCHANGE_START_BLOCK, repository, events);
} }
const tabelNameRegex = /^[a-zA-Z_]*$/;
async function getStartBlockAsync<T extends ExchangeEvent>(repository: Repository<T>): Promise<number> { async function getStartBlockAsync<T extends ExchangeEvent>(repository: Repository<T>): Promise<number> {
const fillEventCount = await repository.count(); const fillEventCount = await repository.count();
if (fillEventCount === 0) { if (fillEventCount === 0) {
console.log(`No existing ${repository.metadata.name}s found.`); console.log(`No existing ${repository.metadata.name}s found.`);
return EXCHANGE_START_BLOCK; return EXCHANGE_START_BLOCK;
} }
const tableName = repository.metadata.tableName;
if (!tabelNameRegex.test(tableName)) {
throw new Error('Unexpected special character in table name: ' + tableName);
}
const queryResult = await connection.query( const queryResult = await connection.query(
// TODO(albrow): Would prefer to use a prepared statement here to reduce `SELECT block_number FROM raw.${tableName} ORDER BY block_number DESC LIMIT 1`,
// surface area for SQL injections, but it doesn't appear to be working.
`SELECT block_number FROM raw.${repository.metadata.tableName} ORDER BY block_number DESC LIMIT 1`,
); );
const lastKnownBlock = queryResult[0].block_number; const lastKnownBlock = queryResult[0].block_number;
return lastKnownBlock - START_BLOCK_OFFSET; return lastKnownBlock - START_BLOCK_OFFSET;