upgrade PyMySQL and aiomysql

CDLUC3 / ezid

CDLUC3 ezid

MIT License

11 stars 4 forks source link

upgrade PyMySQL and aiomysql #644

Closed jsjiang closed 4 months ago

jsjiang commented 4 months ago

@sfisher Hi Scott, This is to upgrade PyMySQL and aiomysql to resolve PyMySQL SQL Injection vulnerability. Please review and let me know if you have quesitons.

Thank you

Jing

jsjiang commented 4 months ago

Tests:

Unit and CI tests: passed
functional tests (verify_ezid_after_patching.py): passed on ezid-stg (tag v3.2.10rc0)
UI tests (ezid_ui_tests.py): passed on ezid-stg (tag v3.2.10rc0)