ab8daf516f
* Qual: Remove SQL injection suppressions from Phan baseline # Qual: Remove SQL injection suppressions from Phan baseline - Removed SqlInjection suppressions from baseline.txt - Removed SqlInjectionUnquotedEscape suppressions from baseline.txt * Qual: Improve SQL query escaping and formatting in contact list # Qual: Improve SQL query escaping and formatting in contact list Improved the SQL query escaping for compatibility with SqlInjection. Does not fix the inappropriate/incomplete escaping through usage of the 'escapeforlike' for REGEX or PGSQL '~'. * Qual: Add SQLInjection suppression comments # Qual: Add SQLInjection suppression comments Added SQLInjection suppression directives: - In modules_import.class.php, for json_encode operations. - In html.formproduct.class.php, for expression "sanitized" by $db->order(). - In html.formwebportal.class.php, for the WHERE clause conditions (supposes safe argument). --------- Co-authored-by: Laurent Destailleur <eldy@destailleur.fr> |
||
|---|---|---|
| .. | ||
| api/macos | ||
| codespell | ||
| phan | ||
| php-cs-fixer | ||
| phpstan | ||
| rector | ||
| test | ||
| .gitignore | ||
| apstats.php | ||
| dolibarr-mysql2pgsql.pl | ||
| dolibarr-postgres2mysql.php | ||
| fixaltlanguages.sh | ||
| fixaltlanguages_pre-commit.sh | ||
| fixcopyrightheader.php | ||
| fixdosfiles.sh | ||
| fixduplicatelangkey.sh | ||
| fixduplicatelanglines.sh | ||
| fixnotabfiles.sh | ||
| fixperms.sh | ||
| fixsnakeCaseToCamelCase.sh | ||
| fixutf8bomfiles.sh | ||
| github_authors_and_commits_bydate.sh | ||
| github_commits_byversion.sh | ||
| github_lines_byuser.sh | ||
| github_pr_reviewers_webhook.php | ||
| make_sprite.sh | ||
| optimize_images.sh | ||
| resize_window.sh | ||