Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Handle SQL injection vulnerabilities within ObjectToSQLString #3547

Merged
merged 26 commits into from
Jul 2, 2024
Merged

Handle SQL injection vulnerabilities within ObjectToSQLString #3547

merged 26 commits into from
Jul 2, 2024

Commits on Jun 9, 2024

  1. Add injection test cases

    @fredericDelaporte
    fredericDelaporte committed Jun 9, 2024
    Configuration menu
    Copy the full SHA
    d4b9daf View commit details
    Browse the repository at this point in the history

  2. Add a discriminator injection test

    @fredericDelaporte
    fredericDelaporte committed Jun 9, 2024
    Configuration menu
    Copy the full SHA
    a3619ac View commit details
    Browse the repository at this point in the history

Commits on Jun 10, 2024

  1. Add a test for special characters

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    b7a153a View commit details
    Browse the repository at this point in the history

  2. Minor code cleanup

    @hazzik @fredericDelaporte
    hazzik authored and fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    d2ff013 View commit details
    Browse the repository at this point in the history

  3. Add test for char

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    d480863 View commit details
    Browse the repository at this point in the history

  4. Minor code cleanup

    @hazzik @fredericDelaporte
    hazzik authored and fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    61a9549 View commit details
    Browse the repository at this point in the history

  5. Initial is reserved keyword in oracle

    @hazzik @fredericDelaporte
    hazzik authored and fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    897a869 View commit details
    Browse the repository at this point in the history

  6. Add a charenum injection test

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    f6c3988 View commit details
    Browse the repository at this point in the history

  7. Add an Uri injection test case

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    d7677c6 View commit details
    Browse the repository at this point in the history

  8. Add numerical types injection test cases

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    69c4c12 View commit details
    Browse the repository at this point in the history

  9. Add a datetime test case

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    d85c5a6 View commit details
    Browse the repository at this point in the history

  10. Escapes string in AbstractStringType

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    4cf9fd3 View commit details
    Browse the repository at this point in the history

  11. Fix argument name

    @hazzik @fredericDelaporte
    hazzik authored and fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    2d21ff3 View commit details
    Browse the repository at this point in the history

  12. Fix a test failing due to new Unicode support

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    0dcbfca View commit details
    Browse the repository at this point in the history

  13. Fix the char type

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    2da9e9e View commit details
    Browse the repository at this point in the history

  14. Fix types handled as SQL strings 

    Not including EnumStringType which ObjectToSQLString is invalid.
    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    02bcc42 View commit details
    Browse the repository at this point in the history

  15. Add a minimal fix for numeric types

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    edc4177 View commit details
    Browse the repository at this point in the history

  16. Minimal fix for the datetime case

    @fredericDelaporte
    fredericDelaporte committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    77fe3e5 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2024

  1. Disallow culture injection for numeric types

    @fredericDelaporte
    fredericDelaporte committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    aa91eb7 View commit details
    Browse the repository at this point in the history

  2. Disallow culture injecton in ticks dependent types

    @fredericDelaporte
    fredericDelaporte committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    03936a2 View commit details
    Browse the repository at this point in the history

  3. Generate async files

    @github-actions
    github-actions[bot] committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    b7c0576 View commit details
    Browse the repository at this point in the history

Commits on Jun 12, 2024

  1. Switch to cast instead of convert

    @fredericDelaporte
    fredericDelaporte committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    ea888be View commit details
    Browse the repository at this point in the history

  2. Add injection test for other datetime types

    @fredericDelaporte
    fredericDelaporte committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    27bc4bf View commit details
    Browse the repository at this point in the history

  3. Fix other datetime types

    @fredericDelaporte
    fredericDelaporte committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    0c35063 View commit details
    Browse the repository at this point in the history

  4. Add a Guid injection test

    @fredericDelaporte
    fredericDelaporte committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    e80b766 View commit details
    Browse the repository at this point in the history

  5. Fix the Guid type

    @fredericDelaporte
    fredericDelaporte committed Jun 12, 2024
    Configuration menu
    Copy the full SHA
    a1cebb2 View commit details
    Browse the repository at this point in the history