Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Disallow non-parameterized queries for Bulk Copy API for batch insert #756

Merged
merged 22 commits into from
Jul 28, 2018
Merged

Disallow non-parameterized queries for Bulk Copy API for batch insert #756

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
e82db3f
Not going to allow non-parameterized query + test
peterbae Jul 20, 2018
c4eef3c
change how exceptions are worded
peterbae Jul 23, 2018
bb74613
fix issue with multiple queries going through
peterbae Jul 24, 2018
e9d35e9
part of fuzz testing
peterbae Jul 24, 2018
e40f6cd
check string length
peterbae Jul 24, 2018
088f7b1
more checkings
peterbae Jul 24, 2018
5baa313
remove recursion
peterbae Jul 25, 2018
85e0186
remove all recursions
peterbae Jul 25, 2018
d3ea922
move statement to try block
peterbae Jul 25, 2018
87f56b6
remove double try statement
peterbae Jul 25, 2018
f644d1d
immediately reject the query if it's a non-parameterized query
peterbae Jul 25, 2018
e15c6ff
problems go away
peterbae Jul 26, 2018
a286b23
check before insert to make sure we're not dealing with smalldatetime…
peterbae Jul 26, 2018
db89338
remove out the commented test part
peterbae Jul 26, 2018
4ffb9cb
update test
peterbae Jul 26, 2018
2e80254
ulvi is never wrong it seems
peterbae Jul 27, 2018
b4aed05
provide some extra security against semicolons
peterbae Jul 27, 2018
74872cb
thank you cheena
peterbae Jul 27, 2018
88e2da2
has to be <= 0
peterbae Jul 27, 2018
3fe78e1
extra safety
peterbae Jul 27, 2018
fd68988
escape things
peterbae Jul 28, 2018
b62d82a
Revert "escape things"
peterbae Jul 28, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading