#607 Fix SQL injection in List filters
Pull request opened by
iaroslav-ciupin
TL;DR
Validate filters in List API endpoints so that they only contain supported columns and columns of joined tables.
SQL injection of sort keys is done in separate
PR
Type
☑︎ Bug Fix
☐ Feature
☐ Plugin
Are all requirements met?
☑︎ Code completed
☐ Smoke tested
☑︎ Unit tests added
☐ Code documentation added
☐ Any pending items have an associated Issue
Complete description
How did you fix the bug, make the feature etc. Link to any design docs etc
Tracking Issue
_Remove the '_fixes_' keyword if there will be multiple PRs to fix the linked issue_
fixes
https://github.com/flyteorg/flyte/issues/
Follow-up issue
NA
OR
https://github.com/flyteorg/flyte/issues/
flyteorg/flyteadmin
GitHub Actions: Unit Tests / Run Unit Test
GitHub Actions: Check Go Generate / Go Generate
GitHub Actions: Lint / Run Lint
GitHub Actions: Docker Build Images / Build Docker Image
✅ 2 other checks have passed
2/6 successful checks