Uploaded image for project: 'RAML Module Builder'
  1. RAML Module Builder
  2. RMB-565

review if all CQL to SQL generation code is using masking

    XMLWordPrintable

    Details

    • Template:
    • Sprint:
      CP: sprint 87
    • Story Points:
      2
    • Development Team:
      Core: Platform

      Description

      In CQL to PG SQL we don't use prepared statements since the SQL is generated automatically. To avoid injection all input variables must be properly escaped. Confirm if this is the case and add any missing tests.

        TestRail: Results

          Attachments

            Issue Links

            is blocked by

            Bug - A problem which impairs or prevents the functions of the product. RMB-189 PostgresClient should use ? placeholder to avoid SQL Injection

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Open
            relates to

            New Feature - New feature requests RMB-246 migrate to reactive postgres client (vertx-pg-client)

            • P2 - normal priority level, must be included in the current development cycle
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. RMB-563 SQL injection in PostgresClient.update by id

            • P2 - normal priority level, must be included in the current development cycle
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. RMB-603 Index name 63 chars truncation for long table and field names

            • TBD - To be determined
            • Open

            Bug - A problem which impairs or prevents the functions of the product. RMB-803 Fix URL encoding in BuildCQL preventing CQL injection

            • P3 - low priority level, item will be considered for inclusion in the next dev cycle
            • Closed

              Activity

                People

                Assignee:
                julianladisch Julian Ladisch
                Reporter:
                adam Adam Dickmeiss
                Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:

                    TestRail: Runs

                      TestRail: Cases