Files
photoview/api/graphql/resolvers
stz184 53b323640f Fixes viktorstrate/photoview#71
In order to prevent SQL injections and , reveal information about the database tables avoid passing MySQL functions as GQL sorting parameters, I refactored the FormatSQL() function.
Additionally, the old approach with using regex to filter the orderBy parameter was not effective and prevented using column.table annotations.
2020-10-13 18:27:28 +03:00
..
2020-10-13 18:27:28 +03:00
2020-10-13 18:27:28 +03:00
2020-02-21 16:50:50 +01:00
2020-09-25 19:21:03 +02:00
2020-07-10 14:26:19 +02:00
2020-07-10 18:35:37 +02:00
2020-10-13 18:27:28 +03:00