fix: escaping postgresql password

bentoml · Jul 1, 2022 · 3ba8ac1 · 3ba8ac1
1 parent 6916b93
commit 3ba8ac1
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/api-server/services/db.go b/api-server/services/db.go
@@ -5,6 +5,7 @@ import (
 	"database/sql"
 	"fmt"
 	"log"
+	"net/url"
 	"os"
 	"strings"
 	"sync"
@@ -79,9 +80,10 @@ func getPgHost() string {
 
 // nolint: unparam
 func getDBURI() (string, error) {
+	password := url.QueryEscape(config.YataiConfig.Postgresql.Password)
 	uri := fmt.Sprintf("postgres://%s:%s@%s:%d/%s?sslmode=disable",
 		config.YataiConfig.Postgresql.User,
-		config.YataiConfig.Postgresql.Password,
+		password,
 		getPgHost(),
 		config.YataiConfig.Postgresql.Port,
 		config.YataiConfig.Postgresql.Database)