vassili/seitime-frappe
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

[fix] Sanitize blacklisted functions

Browse source
This commit is contained in:
Saurabh 2018-05-30 15:07:18 +05:30
parent 418d654331
commit 55eaba90f5
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
frappe/model/db_query.py
View file

@ -203,7 +203,10 @@ class DatabaseQuery(object):
if any(keyword in field.lower().split() for keyword in blacklisted_keywords):
_raise_exception()
if any("{0}(".format(keyword) in field.lower().split() for keyword in blacklisted_functions):
if any("({0}".format(keyword) in field.lower() for keyword in blacklisted_keywords):
_raise_exception()
if any("{0}(".format(keyword) in field.lower() for keyword in blacklisted_functions):
_raise_exception()
def extract_tables(self):