Joonas Kylmälä 9a03861c8f Bug 27715: Use $dbh->quote_identifier to quote untrusted input ... The sanitization using regex and \w class of characters might be enough but given the vast number of unicode characters in \w and possibility of in the future the database engines interpreting some of those characters with special meaning it is better to wrap the column identifier to quotes using $dbh->quote_identifier so it is only interpreted as identifier and nothing else. Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>		2021-02-23 14:35:08 +01:00
..
Acquisition	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Biblio	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Budgets	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Circulation	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
External	…
Koha	Bug 26171: (QA follow-up) Add table name and object type to message	2021-01-07 14:46:51 +01:00
Members	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Number	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
SIP	…
Search	Bug 12430: Add unit tests for C4::Search::buildQuery	2020-12-10 11:05:54 +01:00
Serials	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Test	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
db_dependent	Bug 27715: Use $dbh->quote_identifier to quote untrusted input	2021-02-23 14:35:08 +01:00
edi_testfiles	…
etc	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
lib	Bug 27336: Fix xt/find-missing-filters.t	2021-01-11 14:05:06 +01:00
00-checkdatabase-version.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
00-deprecated.t	…
00-load.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
00-merge-conflict-markers.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
00-testcritic.t	Bug 21395: Make perlcritic happy	2020-06-29 12:37:02 +02:00
00-valid-xml.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Auth.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Auth_with_shibboleth.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
AuthoritiesMarc_MARC21.t	…
AuthoritiesMarc_UNIMARC.t	…
Barcodes_EAN13.t	…
Barcodes_annual.t	…
Barcodes_hbyymmincr.t	…
Barcodes_incremental.t	…
Biblio.t	Bug 26133: Remove GetMarcHosts	2020-08-05 17:36:28 +02:00
Biblio2.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Boolean.t	…
Budgets.t	…
Calendar.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Charset.t	…
Circulation_barcodedecode.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
ClassSortRoutine.t	…
ClassSortRoutine_Dewey.t	…
ClassSortRoutine_Generic.t	…
ClassSortRoutine_LCC.t	…
ClassSource.t	…
Context.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Contract.t	…
Creators.t	…
DateUtils.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Debug.t	…
EdiInvoice.t	Bug 18267: Refactored Edifact Price Calculations	2020-11-16 13:46:48 +01:00
EdiTransport.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Edifact.t	Bug 18267: (QA follow-up) fix typo: overriden => overridden	2020-11-24 09:52:36 +01:00
Ediorder.t	Bug 23926: Limit GIR segment to 5 pieces of info	2020-03-10 15:18:22 +00:00
Ediordrsp.t	…
Form_MessagingPreferences.t	…
HtmlTags.t	…
ImportBatch.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Installer_PerlModules.t	…
Installer_pm.t	…
ItemCirculationAlertPreference.t	…
Koha.t	…
Koha_MetadataRecord.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Koha_SearchEngine_Elasticsearch_Browse.t	…
Koha_Template_Plugin_Cache.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Koha_Template_Plugin_HtmlId.t	Bug 27336: Sanitize correctly HTML id	2021-01-11 14:04:19 +01:00
Koha_Template_Plugin_Koha.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Koha_Util_FrameworkPlugin.t	…
Koha_Util_MARC.t	…
Labels.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Labels_split_Regex.t	…
Labels_split_ccn.t	…
Labels_split_ddcn.t	…
Labels_split_lccn.t	…
Languages.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Letters.t	…
Logger.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Makefile.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Matcher.t	…
Members_Messaging.t	…
OpenLibrarySearch.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Output.t	Bug 24369: Add CORS support to output_with_http_headers()	2020-03-05 12:59:44 +00:00
Output_JSONStream.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
Patron.t	…
Patroncards.t	…
Patroncards_Batch.t	…
Patroncards_Lib.t	…
Patroncards_Patroncard.t	…
Patroncards_Profile.t	…
Patroncards_Template.t	…
Prices.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
RecordProcessor.t	Bug 25008: Tests for ->options	2020-04-14 08:31:22 +01:00
Ris.t	…
SMS.t	…
Scheduler.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Scrubber.t	…
Search.t	…
Search_PazPar2.t	…
SimpleMARC.t	Bug 26781: Check for subfield defined rather than truth	2020-10-26 00:14:41 +01:00
SocialData.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
Stats.t	…
SuggestionEngine.t	Bug 21395: Make perlcritic happy	2020-06-29 12:37:02 +02:00
SuggestionEngine_AuthorityFile.t	Bug 25898: Prohibit indirect object notation	2020-10-15 12:56:30 +02:00
TmplToken.t	…
Token.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
XSLT.t	…
dummy.t	Bug 21395: Make perlcritic happy	2020-06-29 12:37:02 +02:00
template_filters.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00
timezones.t	Bug 26384: Fix executable flags	2020-09-11 09:56:56 +02:00