Files
photoview/api
stz184 53b323640f Fixes viktorstrate/photoview#71
In order to prevent SQL injections and , reveal information about the database tables avoid passing MySQL functions as GQL sorting parameters, I refactored the FormatSQL() function.
Additionally, the old approach with using regex to filter the orderBy parameter was not effective and prevented using column.table annotations.
2020-10-13 18:27:28 +03:00
..
2020-02-21 16:50:50 +01:00
2020-09-25 19:31:35 +02:00
2020-10-13 18:27:28 +03:00
2020-10-04 16:34:47 +02:00
2020-10-04 16:34:47 +02:00
2020-07-12 14:17:49 +02:00
2020-10-04 16:34:47 +02:00