CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases Wiki Activity

Merge pull request #508 from ShruthiRajaram/FINERACT-682

Browse Source 
FINERACT-682: SQL injection impact fixes
This commit is contained in:
ShruthiRajaram
2019-01-23 15:56:19 +05:30
committed by GitHub
parent 4fd584c87f 40b24272ed
commit 3c21ae1483
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fineract-provider/src/main/java/org/apache/fineract/infrastructure/dataqueries/service/ReadReportingServiceImpl.java
-1
View File
@@ -223,7 +223,6 @@ public class ReadReportingServiceImpl implements ReadReportingService {
final String inputSql = "select " + type + "_sql as the_sql from stretchy_" + type + " where " + type + "_name = '" + name + "'"; final String inputSql = "select " + type + "_sql as the_sql from stretchy_" + type + " where " + type + "_name = '" + name + "'";
validateReportName(name); validateReportName(name);
this.columnValidator.validateSqlInjection(inputSql, name);
final String inputSqlWrapped = this.genericDataService.wrapSQL(inputSql); final String inputSqlWrapped = this.genericDataService.wrapSQL(inputSql);