e5c7ecc82a
added section description
3 months ago
5858dd0b39
added env section description
# Conflicts:
# application/src/main/resources/thingsboard.yml
# msa/js-executor/config/default.yml
6 months ago
e5734208e9
Hardened tb-js-executor sandbox script invocation (JVN#16937365)
The args array passed into the sandbox carried the host realm prototype
chain, so a script could reach the host Function constructor via
args.constructor.constructor and execute arbitrary code in the host
process (read files, run shell commands, dump env vars).
Construct args inside the sandbox context using vm.runInContext('[]'),
then populate with string primitives. The resulting array's prototype
chain belongs to the sandbox realm, so constructor traversal cannot
escape. Strings are primitives and safe to cross the realm boundary.
Affects use_sandbox=true path only. The use_sandbox=false path
(invokeFunction) is intentionally left as-is and explicitly marked as
dangerous-by-design — it compiles and runs user-supplied scripts in
the host realm via vm.compileFunction (parsingContext only isolates
parsing, not execution). It remains as a documented performance
trade-off for trusted, non-public clusters; a startup WARN is logged
when script.use_sandbox=false, and an operator-facing yaml comment
sits next to the setting in config/default.yml.
Reported by Hiroki Imai, LAC Co., Ltd.
4 months ago
d7557339c2
Added lz4 as compression option into yml files
4 months ago
704064615a
feat(js-executor): support lz4 compression for Kafka producer
4 months ago
5b5b4dff6b
Update license header
8 months ago
5cf26d4851
Update license header
2 years ago
12ca1739d4
Remove all queue types except Kafka
2 years ago
80d6a3f98e
set default kafka compression to none, to align it with the ThingsBoard application defaults
2 years ago
5c6b4122d3
Add SSL support for Kafka queue connection in JS executor
2 years ago
d89b14e359
Kafka Confluent compatibility out of the box: segment.bytes:26214400 increased segment.bytes:52428800
2 years ago
09fc025e12
Initial commit from another fork
3 years ago
c5a72ed8df
Update license header to 2024 year.
3 years ago
c8b8fb2147
added global queue prefix support for js-executor
3 years ago
29c3eddc8a
Merge with branch 'develop/3.5' of github.com:thingsboard/thingsboard
3 years ago
cbdc4517e4
Update license header year to 2023
4 years ago
198f3ca21d
allow to configure kafkajs connectionTimeout
4 years ago
11bd9b5257
added nodejs memory leak workaround
4 years ago
e32bd456b7
added memory usage log to the js-executors
4 years ago
8d735f4886
Add script invocation result size check to remote JS executor
4 years ago
ed6e636918
Refactor JS-Executor microservice to typescript
4 years ago
c1e6684a2c
Increase Kafka linger ms to 5 ms for js-executors.
4 years ago
da4c742872
Update license year to 2022
5 years ago
d117cec09e
js-executor: partitions_consumed_concurrently marked as experimental
5 years ago
9ffa50f4a5
js-executor: fixed env variables mapping
5 years ago
9a4a94621a
js-executor: parameter added for Kafka PARTITIONS_CONSUMED_CONCURRENTLY to decrease max latency while scale down replicas
5 years ago
98bea8eaf5
js-executor: http livenessProbe added
5 years ago
93bea70205
js-executor: added parameters for producer TB_KAFKA_BATCH_SIZE and TB_KAFKA_LINGER_MS; added print stats frequency SCRIPT_STAT_PRINT_FREQUENCY
5 years ago
18f27b18fe
remote js-executor: adjusted default values
5 years ago
c08e2ada1f
remote js-executor: parameter added KAFKA_CLIENT_ID
5 years ago
01bf53b7f5
remote js-executor: parameter added TB_QUEUE_KAFKA_REQUEST_TIMEOUT_MS
5 years ago
c94dc5972e
remote js-executor: parameter added TB_KAFKA_ACKS="1"
5 years ago
a569058c29
remote js-executor: added metric response sent to queue ms in debug level; parameter added SLOW_QUERY_LOG_BODY="true" to enable log bloat
5 years ago
c9f3562b58
remote js-executor: parameter added KAFKA_CLIENT_ID
5 years ago
d25d13d7c0
remote js-executor: added slow query log, log config on service start
5 years ago
3c52c8c221
added "min.insync.replicas" parameter to the kafka topics
6 years ago
d31358b2ea
Update license header - set 2021 year
6 years ago
f16672cbf6
added partition property for kafka
6 years ago
e318b193bd
Develop/2.5.3 confluent cloud ( #3259 )
* added other parameters for queue kafka
* Added support Confluent Cloud
* fix js executor kafka connection
* refactored
6 years ago
9ef3445b77
refactored
6 years ago
7a47cd503b
Revert "Develop/2.5 js executor ( #2685 )"
This reverts commit 1599b24c3a
6 years ago
1599b24c3a
Develop/2.5 js executor ( #2685 )
* moved kafka from service.js to own module
* created awsSqs, pubSub, rabbitmq js-executors
* revert RemoteJsInvokeService
* revert thingsboard.yml
* added queue settings to js-executor
* refactored queue factories
* added queue params to pubsub js-executor
* azure service bus js-executor
6 years ago
43b2eedbd5
azure service bus js-executor
6 years ago
ef35ee8c30
added queue settings to js-executor
6 years ago
0dc31fbdde
created awsSqs, pubSub, rabbitmq js-executors
6 years ago
4fb309c37e
moved kafka from service.js to own module
6 years ago
3e2a87135f
Prepare for merge with master
7 years ago
850d6d948c
Update License header year to 2020
7 years ago
1265a9a1e3
Revert "Update License header year to 2020"
This reverts commit 9b42397c4a
7 years ago
9b42397c4a
Update License header year to 2020
7 years ago
dashevchenko
Sergey Matvienko
Volodymyr Babak
Viacheslav Klimov
Igor Kulikov
Armin Felder
Vladyslav_Prykhodko
Ivan Raznatovskyi
Seraphym-Tuhai
AndreMaz
YevhenBondarenko
Yevhen Bondarenko
Andrew Shvayka