mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-13 16:02:59 +00:00
Ruben FiszelandClaude Opus 5.5
3f46ff8118
%%WM_*%% contextual variables were substituted into SQL as raw text, so a value carrying a quote (an end-user email such as x'/**/OR/**/'1'='1'--@e.com in WM_END_USER_EMAIL) could break out of the surrounding string literal and run with the app author's database credentials. Escape each value for the dialect's single-quoted literal: '' for PostgreSQL, MSSQL, Oracle and DuckDB; \\ plus '' for MySQL and Snowflake (a quoted email local part can carry a backslash, which those dialects treat as an escape); \\ plus \' for BigQuery, which does not accept ''. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise