seitime-frappe/frappe
Faris Ansari ddca77429c fix: secure query building
Add strict validation using regex for fields in SELECT, filters, GROUP BY, and ORDER BY clauses to avoid potential SQL injection risks.

Refactor field parsing and validation logic into dedicated functions.
2025-06-18 16:00:22 +05:30
..
api fix: remove doc.reload 2025-06-18 15:56:11 +05:30
automation feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
change_log
commands chore: use frappe._dev_server instead of local.dev_server 2025-06-17 12:03:08 +05:30
contacts chore: Drop empty UnitTestCases (#32867) 2025-06-10 05:28:53 +00:00
core fix: always defer access log insertion (#32976) 2025-06-18 07:03:11 +05:30
custom chore: Drop empty UnitTestCases (#32867) 2025-06-10 05:28:53 +00:00
data
database fix: secure query building 2025-06-18 16:00:22 +05:30
desk fix: restrict method types in few whitelisted funcs (#32984) 2025-06-18 11:02:57 +05:30
email feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
geo fix: add Serbian (Latin) language (#32931) 2025-06-13 18:38:04 +02:00
gettext fix: translatable string extraction (#32142) (#32148) 2025-04-15 17:43:52 +00:00
integrations Merge pull request #32351 from sokumon/offsite-backups-removal 2025-06-17 23:30:51 +05:30
locale fix: sync translations from crowdin (#32921) 2025-06-16 23:55:35 +02:00
model fix: rename method typing 2025-06-18 15:51:13 +05:30
modules refactor: pass app as an argument to avoid duplicte function call 2025-04-25 14:55:07 +05:30
patches fix: add warning for module seperation 2025-06-15 00:00:22 +05:30
printing feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
public fix: update setup_complete based on current app 2025-06-13 14:41:17 +05:30
query_builder perf: minor improvements to execute_query 2025-05-30 11:24:52 +05:30
search refactor: change filter from tuple to dict 2024-11-26 11:38:15 +05:30
templates fix: Fix link in delete data confirmation email template (#32544) 2025-05-16 10:00:20 +05:30
testing feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
tests test: enable server script temporarily 2025-06-18 15:56:11 +05:30
types Revert: DocRef (#32866) 2025-06-10 05:20:56 +00:00
utils fix: print traceback instead of errprint 2025-06-18 15:56:11 +05:30
website feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
workflow feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
www Merge pull request #32988 from iamejaaz/41272-rate-limit-issue 2025-06-18 12:17:18 +05:30
__init__.py feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
_optimizations.py Revert "fix: Pin web workers by default (#31739)" (#32852) 2025-06-09 09:52:23 +00:00
app.py refactor: reduce branching in init_request (#32981) 2025-06-18 10:01:20 +05:30
apps.py refactor: track completed app setup wizards and re-run the setup wizard upon new app installation. (#32640) 2025-06-03 12:36:22 +05:30
auth.py fix: show request ip for easier debugging 2025-05-23 14:55:16 +05:30
boot.py fix(boot): Don't register app as "required" multiple times (#32773) 2025-06-04 20:11:03 +05:30
build.py chore: use frappe._dev_server instead of local.dev_server 2025-06-17 12:03:08 +05:30
cache_manager.py refactor: avoid code duplication 2025-06-11 09:55:36 +05:30
client.py perf: Use lazy doc in a lot more places 2025-06-11 09:55:45 +05:30
config.py feat: init sqlite 2025-04-15 13:59:16 +05:30
coverage.py ci: make gh actions functions (#28299) 2024-10-27 02:09:02 +00:00
defaults.py perf: client-cache for defaults 2025-01-07 12:51:10 +05:30
deferred_insert.py fix: Commit frequently in deferred_insert 2025-06-13 11:34:18 +05:30
deprecation_dumpster.py refactor!: Change internal datastructure of db.value_cache 2025-06-05 14:46:03 +05:30
exceptions.py fix: Implement backpressure for background jobs 2025-03-05 10:59:00 +05:30
frappeclient.py fix: only show tracebacks to system users (#31629) 2025-03-13 14:48:20 +05:30
handler.py perf: Use lazy doc in a lot more places 2025-06-11 09:55:45 +05:30
hooks.py fix: seperate backup options into app 2025-06-14 23:59:22 +05:30
installer.py fix: invalidate persistent caches 2025-06-11 00:28:38 +05:30
locale.py feat: cache documents in client cache 2025-01-14 14:33:10 +05:30
middlewares.py
migrate.py fix: made it a patch instead of running every migrate 2025-03-27 15:23:38 +05:30
modules.txt fix: remove energy points / social module 2025-04-17 00:26:57 +05:30
monitor.py fix: avoid flushing to monitor logs concurrently (#32552) 2025-05-16 12:20:40 +00:00
oauth.py perf: Skip link checking on internal deletes 2025-01-06 11:48:19 +05:30
onboarding.py fix: added get_onboarding_status api 2025-03-18 18:06:30 +05:30
parallel_test_runner.py feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
patches.txt fix: add warning for module seperation 2025-06-15 00:00:22 +05:30
permissions.py fix: skip strict perm while writing on local document too (#32927) 2025-06-13 15:42:24 +05:30
push_notification.py fix(push_notification): use cstr to convert a None body to empty string (#32056) 2025-04-10 12:47:30 +05:30
rate_limiter.py fix: Round of rate limit to seconds (#31674) 2025-03-12 10:52:42 +00:00
realtime.py fix(realtime): fetch user_type if not available in session data (#31865) 2025-03-24 10:14:48 +05:30
recorder.py feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
sessions.py feat: global frappe.in_test flag (#32960) 2025-06-17 19:19:31 +05:30
share.py perf: Use lazy doc in a lot more places 2025-06-11 09:55:45 +05:30
test_runner.py refactor: organize test contextmanagers (#28041) 2024-10-09 02:09:19 +02:00
translate.py fix: remove utils file and typo 2025-06-17 18:39:21 +05:30
twofactor.py chore(twofactor): specify key to display during decryption failures 2024-09-16 13:00:38 +05:30