fixup! fixup! fixup! ⚰️ refactor: Remove commented-out code, unneeded…

… files
dynatrace-oss · Nov 20, 2023 · 0b6b3a5 · 0b6b3a5
1 parent 8d10088
commit 0b6b3a5
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 10 deletions.
diff --git a/chart/values.yaml b/chart/values.yaml
@@ -178,7 +178,7 @@ userAuthService:
           secretKeyRef:
             name: "{{ .Values.mariaDB.serviceName }}"
             key: "{{ .Values.mariaDB.password }}"
-        JAEGER_AGENT_HOST: agent # change depending on your jaeger deployment
+        JAEGER_AGENT_HOST: agent  # change depending on your jaeger deployment
         JAEGER_SAMPLER_TYPE: const
         JAEGER_SAMPLER_PARAM: 0
         JAEGER_DISABLED: true
@@ -207,7 +207,7 @@ adService:
       ports:
         containerPort: 8082
       env:
-        JAEGER_AGENT_HOST: agent # change depending on your jaeger deployment
+        JAEGER_AGENT_HOST: agent  # change depending on your jaeger deployment
         JAEGER_SAMPLER_TYPE: const
         JAEGER_SAMPLER_PARAM: 0
         JAEGER_DISABLED: true
@@ -266,7 +266,7 @@ microblogService:
         containerPort: 8080
       env:
         SERVER_PORT: 8080
-        JAEGER_AGENT_HOST: agent # change depending on your jaeger deployment
+        JAEGER_AGENT_HOST: agent  # change depending on your jaeger deployment
         JAEGER_SAMPLER_TYPE: const
         JAEGER_SAMPLER_PARAM: 0
         OPENTRACING_JAEGER_ENABLED: false
@@ -321,7 +321,7 @@ statusService:
         SERVER_PORT: 8083
         API_PATH: /status-service
         KUBERNETES_NAMESPACE: unguard
-        IGNORED_DEPLOYMENTS: unguard-user-simulator # add deployments to ignore separated by spaces
+        IGNORED_DEPLOYMENTS: unguard-user-simulator  # add deployments to ignore separated by spaces
         MARIADB_SERVICE: "{{ .Values.mariaDB.serviceName }}"
         MARIADB_PASSWORD:
           secretKeyRef:
@@ -344,7 +344,7 @@ proxyService:
   role:
     name: proxy-role
     rules:
-      - apiGroups: [ "" ] # "" indicates the core API group
+      - apiGroups: [ "" ]  # "" indicates the core API group
         resources: [ "pods" ]
         verbs: [ "create", "list", "get" ]
       - apiGroups: [ "" ]
@@ -374,7 +374,7 @@ proxyService:
         containerPort: 8081
       env:
         SERVER_PORT: 8081
-        JAEGER_AGENT_HOST: agent # change depending on your jaeger deployment
+        JAEGER_AGENT_HOST: agent  # change depending on your jaeger deployment
         JAEGER_SAMPLER_TYPE: const
         JAEGER_SAMPLER_PARAM: 0
         OPENTRACING_JAEGER_ENABLED: false
@@ -400,7 +400,7 @@ likeService:
       ports:
         containerPort: 8000
       env:
-        JAEGER_COLLECTOR_HOST: collector # PHP OpenTelemetry sends data to jaeger-collector instead of jaeger-agent
+        JAEGER_COLLECTOR_HOST: collector  # PHP OpenTelemetry sends data to jaeger-collector instead of jaeger-agent
         JAEGER_DISABLED: true
         JAEGER_PORT: 4318
         SERVICE_NAME: unguard-like-service
@@ -434,7 +434,7 @@ frontend:
       ports:
         containerPort: 3000
       env:
-        JAEGER_AGENT_HOST: agent # change depending on your jaeger deployment
+        JAEGER_AGENT_HOST: agent  # change depending on your jaeger deployment
         JAEGER_SAMPLER_TYPE: const
         JAEGER_SAMPLER_PARAM: 0
         JAEGER_DISABLED: true
@@ -451,4 +451,3 @@ frontend:
         LIKE_SERVICE_BASE_PATH: /like-service
         MEMBERSHIP_SERVICE_BASE_PATH: /membership-service
         STATUS_SERVICE_BASE_PATH: /status-service
-
diff --git a/exploit-toolkit/exploits/sql-injection/SQLI-LIKE-SERVICE-REMOVE-LIKE.md b/exploit-toolkit/exploits/sql-injection/SQLI-LIKE-SERVICE-REMOVE-LIKE.md
@@ -2,7 +2,6 @@
 
 Utilizing [SQL injection](https://owasp.org/www-community/attacks/SQL_Injection) can lead to sensitive data being read
 and/or databases to be modified (Insert/Update/Delete).
-In addition, administrative operations such as shutting down the DBMS can also be completed.
 
 Unguard has a PHP microservice for handling likes that uses an unsafe version of Laravel, allowing you to remove another user's like on a post. When liking/unliking, normally, the PHP service would receive a post ID and a user ID, but with the right parameters, you can send two post IDs, leading to the latter one being misinterpreted as the user ID by Laravel ([see more details](https://security.snyk.io/vuln/SNYK-PHP-LARAVELFRAMEWORK-1060045)).