0ct0pu5/siyuan
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

🔒 SQL injection security vulnerabilities https://github.com/siyuan-note/siyuan/issues/13077 https://github.com/siyuan-note/siyuan/issues/13059

Browse source
This commit is contained in:
Daniel 2024-11-07 17:32:51 +08:00
parent 7fa1f89061
commit 831d350653
No known key found for this signature in database
GPG key ID: 86211BA83DF03017
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
kernel/model/asset_content.go
View file

@ -63,6 +63,9 @@ func GetAssetContent(id, query string, queryMethod int) (ret *AssetContent) {
query = stringQuery(query)
}
}
if !ast.IsNodeIDPattern(id) {
return
}
table := "asset_contents_fts_case_insensitive"
filter := " id = '" + id + "'"