[GH-ISSUE #104] Investigate a potential SQL injection #40

New issue

Closed

opened 2026-02-27 08:14:54 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 08:14:54 +03:00

Owner

Originally created by @nitnelave on GitHub (Dec 2, 2021).
Original GitHub issue: https://github.com/lldap/lldap/issues/104

Creating a user with a quote inside the name doesn't work. Variable substitution should be delegated to sqlx rather than handled in sea-query, maybe?

Originally created by @nitnelave on GitHub (Dec 2, 2021). Original GitHub issue: https://github.com/lldap/lldap/issues/104 Creating a user with a quote inside the name doesn't work. Variable substitution should be delegated to sqlx rather than handled in sea-query, maybe?