hostsharing/hs.hsadmin.ng
6
0
Fork 0
Code Pull Requests 2 Activity

TODO für potentielle SQL-Injection

Browse Source
This commit is contained in:
Michael Hoennig 2024-12-13 10:09:58 +01:00
parent a0560d2bfd
commit 0ebaec6908
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/main/java/net/hostsharing/hsadminng/hs/office/contact/HsOfficeContactRbacRepository.java
View File

@ -35,6 +35,7 @@ public interface HsOfficeContactRbacRepository extends Repository<HsOfficeContac
} }
static String emailRegEx(@NotNull String emailAddress) { static String emailRegEx(@NotNull String emailAddress) {
// TODO.impl: find more secure solution, maybe we substitute a placeholder with the whole expression?
if (emailAddress.contains("'") || emailAddress.endsWith("\\") ) { if (emailAddress.contains("'") || emailAddress.endsWith("\\") ) {
throw new ValidationException( throw new ValidationException(
"emailAddress contains invalid characters: " + emailAddress); "emailAddress contains invalid characters: " + emailAddress);