Skip to content

Deprecate Interpretation of Raw Properties and Values in the Where Object #7568

@mkaufmaner

Description

@mkaufmaner

What you are doing?

The $raw property needs to be deprecated. See https://github.com/sequelize/sequelize/blob/master/lib/dialects/abstract/query-generator.js#L2219

where: {
  $raw: 'INJECTION POSSIBLE HERE'
}

The interpretation of a where object as literal when property value is an array also needs to be deprecated.

// search with string replacements
Project.findAll({ where: ["id > ?", 25] }).then(function(projects) {
  // projects will be an array of Projects having a greater id than 25
})

Dialect: any
Database version: any
Sequelize version: 4

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions