Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent sql injection through the ids of the action #3495

Conversation

carakas
Copy link
Member

@carakas carakas commented Mar 23, 2022

Type

  • Security

Pull request description

Prevent SQL injection through the id of the form builder mass data action

@carakas carakas added this to the 5.11.1 milestone Mar 23, 2022
@carakas carakas requested a review from a team March 23, 2022 12:17
@codecov
Copy link

codecov bot commented Mar 23, 2022

Codecov Report

Merging #3495 (7a12046) into master (1b38e33) will decrease coverage by 0.00%.
The diff coverage is 0.00%.

@@             Coverage Diff              @@
##             master    #3495      +/-   ##
============================================
- Coverage     27.88%   27.88%   -0.01%     
  Complexity     8145     8145              
============================================
  Files           575      575              
  Lines         30691    30692       +1     
============================================
  Hits           8557     8557              
- Misses        22134    22135       +1     
Flag Coverage Δ
functional 23.78% <0.00%> (-0.01%) ⬇️
installer 3.84% <0.00%> (-0.01%) ⬇️
unit 7.69% <0.00%> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
src/Backend/Modules/FormBuilder/Engine/Model.php 0.00% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1b38e33...7a12046. Read the comment docs.

@carakas carakas merged commit 37283a8 into forkcms:master Mar 23, 2022
@carakas carakas deleted the prevent-sql-injection-on-form-builder-massdataaction branch March 23, 2022 18:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants