hsiegeln abed4dc96f security: fix SQL injection in ClickHouse query escaping ...

Convert ClickHouseUsageTracker and ClickHouseMetricsQueryStore to
use JDBC parameterized queries (? binds) — these query raw tables
without AggregateFunction columns.

Fix lit(String) in RouteMetricsController and ClickHouseStatsStore
to escape backslashes before single quotes. Without this, an input
like \' breaks out of the string literal in ClickHouse (where \
is an escaped backslash). These must remain as literal SQL because
the ClickHouse JDBC 0.9.x driver wraps PreparedStatement in
sub-queries that strip AggregateFunction types, breaking -Merge
combinators.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-04 12:17:12 +02:00

.gitea/workflows

fix: run sonar:sonar in same reactor as verify

2026-04-04 11:57:05 +02:00

.planning

Update docs for RBAC, OIDC, and user management

2026-03-14 12:41:41 +01:00

.playwright-mcp

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

.superpowers/brainstorm

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

cameleer3-server-app

security: fix SQL injection in ClickHouse query escaping

2026-04-04 12:17:12 +02:00

cameleer3-server-core

fix: resolve 25 SonarQube code smells across 21 files

2026-04-04 09:36:13 +02:00

deploy

perf: batch processor and log inserts to reduce ClickHouse part creation

2026-04-03 22:48:04 +02:00

docs

docs: spec for cameleer-deploy-demo prototype

2026-04-03 00:13:04 +02:00

examples

added RBAC mock and spec to examples

2026-03-17 16:21:25 +01:00

org/eclipse/elk

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

screenshots

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ui

fix: reduce ClickHouse CPU by increasing flush interval, rename LIVE→AUTO labels

2026-04-03 22:05:29 +02:00

.dockerignore

Add Docker build, K8s manifests, and CI/CD deploy pipeline

2026-03-12 19:01:39 +01:00

.gitattributes

Scaffold cameleer3-server project structure

2026-03-11 10:06:17 +01:00

.gitignore

chore: add .worktrees/ to .gitignore for worktree isolation

2026-03-27 18:27:34 +01:00

ci-log2.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ci-log.txt

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

CLAUDE.md

fix: extract snapshot data from chunks, reduce ClickHouse log noise

2026-04-03 17:58:54 +02:00

docker-compose.yml

feat: remove TimescaleDB, dead PG stores, and storage feature flags

2026-04-01 20:10:58 +02:00

Dockerfile

feat: remove OpenSearch, add ClickHouse admin page

2026-04-01 18:56:06 +02:00

HOWTO.md

docs: update all documentation for session changes

2026-04-03 11:22:44 +02:00

openapi.json

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

pom.xml

chore: upgrade cameleer3-common to 1.0-SNAPSHOT and enable snapshot resolution

2026-03-25 08:04:29 +01:00

UI_FINDINGS.md

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

Description

Observability server for Cameleer agents

25 MiB

Languages

Java 61.6%

TypeScript 30.2%

HTML 5.2%

CSS 2.9%