ab8daf516f
* Qual: Remove SQL injection suppressions from Phan baseline # Qual: Remove SQL injection suppressions from Phan baseline - Removed SqlInjection suppressions from baseline.txt - Removed SqlInjectionUnquotedEscape suppressions from baseline.txt * Qual: Improve SQL query escaping and formatting in contact list # Qual: Improve SQL query escaping and formatting in contact list Improved the SQL query escaping for compatibility with SqlInjection. Does not fix the inappropriate/incomplete escaping through usage of the 'escapeforlike' for REGEX or PGSQL '~'. * Qual: Add SQLInjection suppression comments # Qual: Add SQLInjection suppression comments Added SQLInjection suppression directives: - In modules_import.class.php, for json_encode operations. - In html.formproduct.class.php, for expression "sanitized" by $db->order(). - In html.formwebportal.class.php, for the WHERE clause conditions (supposes safe argument). --------- Co-authored-by: Laurent Destailleur <eldy@destailleur.fr> |
||
|---|---|---|
| .. | ||
| build | ||
| examples | ||
| initdata | ||
| initdemo | ||
| resources | ||
| setup | ||
| skeletons | ||
| tools | ||
| translation | ||
| .gitignore | ||
| dolibarr_changes.txt | ||
| lockedfiles.txt | ||
| pullmerge.sh | ||
| README | ||
README (English) -------------------------------- This directory contains sub-directories to provide tools or documentation for developers. Note: All files in this directory are in the source repository only and are not provided with a standard release. They are useless to make Dolibarr working. You may find a more complete documentation on Dolibarr on the wiki: https://wiki.dolibarr.org/ and on https://doxygen.dolibarr.org/