berk / tr8n

This repository has moved to:
https://github.com/tr8n/tr8n
MIT License
280 stars 37 forks source link

Avoid database exceptions by validating input parameters. #34

Closed plerohellec closed 12 years ago

plerohellec commented 12 years ago

Those changes originate from a security pen test. By submitting empty or malformed parameters, the tester managed to generate postgres exceptions. Some validation of the input parameters before passing them to ActiveRecord avoids those errors.