mirror of
https://git.vectorsigma.ru/public/photoview.git
synced 2026-08-03 05:58:50 +00:00
In order to prevent SQL injections and , reveal information about the database tables avoid passing MySQL functions as GQL sorting parameters, I refactored the FormatSQL() function. Additionally, the old approach with using regex to filter the orderBy parameter was not effective and prevented using column.table annotations.