bcgov / bcgov/entity

Colin-API - Convert all sql statements to use bind variables

Open
#6,947 0 comments 0 reactions 0 assignees View on GitHub
techdebt
Dominant language
JavaScript
Stars
23
Forks
62
Avg merge
24m
Merged PRs (30d)
1

Description

As required by Thor: https://github.com/bcgov/lear/pull/1127#discussion_r599879612

## What is the problem?
* Some sql statements don't use bind variables

## What is the impact?
* An SQL injection can happen

## Proposed solution
* Convert all sql statements to use bind variables

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.