Skip to content

Security: SQL Injection Fix in Machine Passport#2875

Closed
MichaelSovereign wants to merge 14 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/passport-sql-injection
Closed

Security: SQL Injection Fix in Machine Passport#2875
MichaelSovereign wants to merge 14 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/passport-sql-injection

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR fixes a potential SQL injection vulnerability in the method.

Changes

  1. Parameterized Query Building: Refactored the dynamic query building to use safe parameter binding for all inputs, removing the use of f-strings within SQL queries.
  2. Robustness: Ensured that pagination parameters (, ) are also handled through parameterized queries.

Closes #7436

@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 05:13
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) node Node server related tests Test suite changes size/L PR: 201-500 lines labels May 2, 2026
@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) node Node server related size/L PR: 201-500 lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants