Koha/t/db_dependent/Utils
Joonas Kylmälä b2b5570f08 Bug 27715: Use $dbh->quote_identifier to quote untrusted input
The sanitization using regex and \w class of characters might be
enough but given the vast number of unicode characters in \w and
possibility of in the future the database engines interpreting some of
those characters with special meaning it is better to wrap the column
identifier to quotes using $dbh->quote_identifier so it is only
interpreted as identifier and nothing else.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2021-02-24 00:12:59 +01:00
..
Datatables.t Bug 27715: Use $dbh->quote_identifier to quote untrusted input 2021-02-24 00:12:59 +01:00
Datatables_Members.t Bug 26384: Fix executable flags 2020-09-11 09:56:56 +02:00
Datatables_Virtualshelves.t Bug 26384: Fix executable flags 2020-09-11 09:56:56 +02:00