CBSNexora/cbsnexora-backend
4
0
Fork 0
Code Issues Pull Requests Actions 37 Packages Projects Releases Wiki Activity

FINERACT-1724: fix sql injection pattern check

Browse Source
This commit is contained in:
jmarta
2023-08-01 14:05:31 +02:00
committed by Adam Saghy
parent 70b14e601e
commit 987d414ac6
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLCommandCondition.java
+1 -1
View File
@@ -20,5 +20,5 @@ package org.apache.fineract.infrastructure.security.utils;
public interface SQLCommandCondition {
boolean checkCondition(String command, String sql);
boolean checkCondition(String sql, String command);
}
fineract-core/src/main/java/org/apache/fineract/infrastructure/security/utils/SQLInjectionValidator.java
+1 -1
View File
@@ -144,7 +144,7 @@ public final class SQLInjectionValidator {
private static void validateSQLCommand(String lowerCaseSQL, String[] commands, SQLCommandCondition condition) {
for (String command : commands) {
if (condition.checkCondition(command, lowerCaseSQL)) {
if (condition.checkCondition(lowerCaseSQL, command)) {
throw new SQLInjectionException();
}
}