ejp-rd-vp / vp-dp-backend

https://www.ejprarediseases.org/
Apache License 2.0
0 stars 2 forks source link

Check unauthorized filters #23

Closed ammarbarakat closed 1 year ago

ammarbarakat commented 1 year ago

Describe your problem.

When handling user inputs or query parameters, we currently lack proper authorization checks for certain filtering operations. This oversight can potentially allow unauthorized users to access or manipulate data that they shouldn't have access to.

Describe the solution you'd like

Check search parametes before processing the request.