freshmaker

#166 [audit] Raw SQL queries generated
Closed: Fixed Opened by puiterwijk.

Closed: Fixed
Reopen Issue

freshmaker/migrations/versions/90f8444d5ab7_add_event_state_and_timestamp.py:26 (and at least one more) generates an SQL query manually by string concatenation.
While this is in a migration, so reasonably safe from attackers, it might still trip up when there's unexpected content picked up (spaces/quotes, etc...).
Please consider using parameterized SQL queries.

Metadata Update from @cqi:
- Issue assigned to cqi

PR: https://pagure.io/freshmaker/pull-request/180

Commit 6a036f54 fixes this issue
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.