wdevs/ResolveSpec
5
0
Fork 0
mirror of https://github.com/bitechdev/ResolveSpec.git synced 2026-06-08 23:03:45 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fix(router): prevent HTML escaping in JSON responses
Build , Vet Test, and Lint / Run Vet Tests (1.24.x) (push) Waiting to run
Details
Build , Vet Test, and Lint / Lint Code (push) Waiting to run
Details
Build , Vet Test, and Lint / Build (push) Waiting to run
Details
Build , Vet Test, and Lint / Run Vet Tests (1.23.x) (push) Waiting to run
Details
Tests / Integration Tests (push) Waiting to run
Details
Tests / Unit Tests (push) Waiting to run
Details

Browse Source 
fix(sql_helpers): avoid prefix extraction in subqueries
This commit is contained in:
Hein
2026-06-08 15:13:58 +02:00
parent 66348dac97
commit c120b49529
3 changed files with 15 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/common/sql_helpers.go
+9
View File
@@ -614,6 +614,15 @@ func extractTableAndColumn(cond string) (table string, column string) {
// Remove any quotes
columnRef = strings.Trim(columnRef, "`\"'")
// If the left side is a parenthesized subquery (starts with '(' and contains SQL keywords),
// don't attempt prefix extraction from inside it.
if len(columnRef) > 0 && columnRef[0] == '(' {
lowerRef := strings.ToLower(columnRef)
if strings.Contains(lowerRef, "select ") || strings.Contains(lowerRef, " from ") || strings.Contains(lowerRef, " where ") {
return "", ""
}
}
// Check if there's a function call (contains opening parenthesis)
openParenIdx := strings.Index(columnRef, "(")