search

AllenNeuralDynamics / aind-metadata-service

Service to retrieve Labtracks/Sharepoint info using a REST API
MIT License
3 stars 1 forks source link

Sanitize inputs when creating sql queries #189

Closed jtyoung84 closed 5 months ago

jtyoung84 commented 6 months ago

Is your feature request related to a problem? Please describe. We want to make sure there is no possibility for users to inject additional sql commands when retrieving information from labtracks.

Describe the solution you'd like We should have a basic sanity check on user inputs.

Describe alternatives you've considered Currently, we are relying on our credentials to be read-only

Additional context Add any other context or screenshots about the feature request here.

jtyoung84 commented 6 months ago

There's probably a library for this