search

powa-team / powa-web

PoWA user interface
http://powa.readthedocs.io/
73 stars 30 forks source link

Remove useless string formatting #93

Closed CyberDem0n closed 4 years ago

CyberDem0n commented 4 years ago

Potentially it could lead to sql injection, although chances that it will be exploited are close to zero due to the url format validation.

rjuju commented 4 years ago

Hello,

Oh indeed! I agree that there's probably no security vulnerability here, but it's a terrible coding practice so this patch is more than welcome.

Thanks a lot!