-
-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix AutoUpload notification #3173
Conversation
Can you give me some hints here since looking at the code it kind of looks the same to me as before except for the query change using parameters. I am pretty sure I am just overlooking something looking at the diff... |
I trimmed it a bit for better readability. Old: New: With new system we let Android construct the query by inserting the arguments to the correct position. This prevents from SQL injection and also does correct escaping. |
Thanks, now I can see it. 🙏 |
- delete not used (and wrong) function Signed-off-by: tobiasKaminsky <tobias@kaminsky.me>
2f1e5e0
to
bc21799
Compare
Lint
FindBugs (new)
FindBugs (master)
|
Codecov Report
@@ Coverage Diff @@
## master #3173 +/- ##
===========================================
+ Coverage 6.36% 6.37% +<.01%
Complexity 1 1
===========================================
Files 307 307
Lines 30118 30108 -10
Branches 4320 4317 -3
===========================================
+ Hits 1918 1920 +2
+ Misses 27913 27902 -11
+ Partials 287 286 -1
|
fix #3163
Problem was that passing everything into selection did not worked.
Also this is error prone to sql injection (yes, very theoratical with folder names), but changing it to use correct parameter solves both.
Steps to test:
Signed-off-by: tobiasKaminsky tobias@kaminsky.me