Skip to content
This repository has been archived by the owner on Feb 4, 2022. It is now read-only.

Filter internal state values from request query #287

Open
amazeika opened this issue Oct 22, 2021 · 0 comments · May be fixed by #288
Open

Filter internal state values from request query #287

amazeika opened this issue Oct 22, 2021 · 0 comments · May be fixed by #288
Assignees
@amazeika
Labels
security
Milestone
3.1

Comments

@amazeika
Copy link
Contributor

ATM we are blindly pushing the whole query into the model state. This isn't an issue unless the active model contains internal state values. In this last case we must absolutely filter the request query in order to avoid pushing internal state values which may compromise the application.
@amazeika amazeika added this to the 3.1 milestone Oct 22, 2021
@amazeika amazeika self-assigned this Oct 22, 2021
amazeika added a commit that referenced this issue Oct 25, 2021
@amazeika
#287 Filter current request query against internal states
9bda297
@github-actions github-actions bot linked a pull request Oct 25, 2021 that will close this issue
Open
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@amazeika amazeika

Labels
security
Projects
None yet
Milestone
3.1
Development

Successfully merging a pull request may close this issue.

Filter internal state values from request query timble/kodekit
1 participant
@amazeika