Files
photoview/api/graphql
stz184 53b323640f Fixes viktorstrate/photoview#71
In order to prevent SQL injections and , reveal information about the database tables avoid passing MySQL functions as GQL sorting parameters, I refactored the FormatSQL() function.
Additionally, the old approach with using regex to filter the orderBy parameter was not effective and prevented using column.table annotations.
2020-10-13 18:27:28 +03:00
..
2020-07-13 18:01:31 +02:00
2020-10-13 18:27:28 +03:00
2020-10-13 18:27:28 +03:00
2020-01-31 23:30:34 +01:00