cBioPortal / cbioportal

cBioPortal for Cancer Genomics
https://cbioportal.org
GNU Affero General Public License v3.0
660 stars 522 forks source link

Data sanitization for giant IN list when handling sampleIds #11195

Open alisman opened 1 week ago

alisman commented 1 week ago

In https://github.com/cBioPortal/cbioportal/pull/11191, we need to sanitize the values to prevent SQL injection. We should also investigate whether we can "use temporary table (or a Table Valued Parameter or JSON if supported)."