[PATCH] 30 Escape parameter values in search filter.
14 Mar
2012
14 Mar
'12
6:09 p.m.
The REST interface was vulnerable to injection attack. This has been fixed by escaping the special characters in parameter values before using them in the search filter. Ticket #96 -- Endi S. Dewata
14 Mar
14 Mar
7:48 p.m.
On 3/14/2012 1:09 PM, Endi Sukma Dewata wrote:
The REST interface was vulnerable to injection attack. This has been fixed by escaping the special characters in parameter values before using them in the search filter.
Ticket #96
ACKed by Ade. I added some clarification in the code. Pushed to master. -- Endi S. Dewata
5350
Age (days ago)
5350
Last active (days ago)
1 comments
1 participants
participants (1)
-
Endi Sukma Dewata