Closed seancorfield closed 2 years ago
The functions here assume keywords in hash maps are "safe" -- which is not true if they're constructed with the keyword function.
keyword
The calls to name should be replaced by a function that checks the string for "suspicious" characters (like HoneySQL does).
name
The functions here assume keywords in hash maps are "safe" -- which is not true if they're constructed with the
keyword
function.The calls to
name
should be replaced by a function that checks the string for "suspicious" characters (like HoneySQL does).