additional sqli protection

2020-06-15 12:01:14 +02:00
parent 51b780b061
commit 559a6e4a50
1 changed files with 2 additions and 1 deletions
@@ -282,7 +282,8 @@ export class CommonDatabase implements Database {
    const tx = txOpaque as Knex.Transaction<any, any>;

    let builder = tx<DbEntitiesRow>('entities');
-    for (const [index, filter] of (filters ?? []).entries()) {
+    for (const [indexU, filter] of (filters ?? []).entries()) {
+      const index = Number(indexU);
      const key = filter.key.replace('*', '%');
      const keyOp = filter.key.includes('*') ? 'like' : '=';