Skip to content

FOUR-33101: Fix sql injection in tasks endpoint - #9041

Open
caleeli wants to merge 1 commit into
developfrom
FOUR-33101
Open

FOUR-33101: Fix sql injection in tasks endpoint#9041
caleeli wants to merge 1 commit into
developfrom
FOUR-33101

Conversation

@caleeli

@caleeli caleeli commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Issue & Reproduction Steps

Describe the issue this ticket solves and describe how to reproduce the issue (please attach any fixtures used to reproduce the issue).

Solution

  • Remove the use of DB::raw().
  • Use a columns list to build safetly the query.
  • Add function to perpare the sort by a data.field column

Related Tickets & Packages

@decisions-sonarqube

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant