search

soleo / scim-rest

Simple Cloud Identity Management (SCIM) v1.1 Scala Implementation
https://pacific-beach-4736.herokuapp.com/
Other
2 stars 0 forks source link

Potential SQL Injection for filter query #1

Open soleo opened 8 years ago

soleo commented 8 years ago

In User Listing, the filterSql won't prepare itself and remove any SQL injection. Need to address this for avoid SQL injection

soleo commented 8 years ago

Ref http://stackoverflow.com/questions/15591479/dynamic-sql-parameters-with-anorm-and-scala-play-framework