Feature request: support for query parameterization

jeremycx / node-LDAP

LDAP binding for node.js

MIT License

221 stars 43 forks source link

Feature request: support for query parameterization #75

Closed philipb closed 8 years ago

philipb commented 9 years ago

Rationale:https://www.owasp.org/index.php/LDAP_injection

search_options.filter could be vulnerable to untrusted input. Depending on the application, obviously.

jeremycx commented 9 years ago

Got a good, complete sanitizer function handy? I'd include if I knew it was 100% correct, but am happy leaving sanitization up to the developer if not.

jeremycx commented 8 years ago

Included in 3.1.X