vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

fix(minor): fixed execute_query patch

Browse source
This commit is contained in:
Aradhya-Tripathi 2021-10-11 14:15:01 +05:30
parent fe7b45c068
commit 5362d367d1
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
frappe/query_builder/utils.py
View file

@ -51,6 +51,7 @@ def patch_query_execute():
"""
def execute_query(query, *args, **kwargs):
query = str(query)
if frappe.flags.in_safe_exec and not query.lower().strip().startswith("select"):
raise frappe.PermissionError('Only SELECT SQL allowed in scripting')
return frappe.db.sql(query, *args, **kwargs)