This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a change to branch 8.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
from 3c5b1b9045 Merge pull request #16053 from
codeconsole/locale-autonym-titlecase
add 4aa9a0b51d Add compile-time check for GORM query strings flattened
from GString
add 46c4ba2486 Track GString origin through variable aliasing, not just
literal coercion
add cceff551fb Extend query safety check with branch-sensitivity fix and
two new warnings
add d3e1ea8485 Add protectSqlInjectionAttacks opt-out for the global query
safety check
add 6e0a8bafe0 Adopt @RestoreSystemProperties in
GlobalGormQuerySafetyASTTransformationSpec
add cb3a5753c7 Detect inline .toString()/cast flattening at the GORM query
call site
new f1fbe86956 Merge pull request #15971 from
apache/feat/gorm-query-safety-ast-check
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../common/compiler/GroovyTransformOrder.groovy | 8 +-
...=> GlobalGormQuerySafetyASTTransformation.java} | 40 +-
.../transform/GormQuerySafetyTransformer.java | 690 +++++++++++++++++++++
...org.codehaus.groovy.transform.ASTTransformation | 1 +
...obalGormQuerySafetyASTTransformationSpec.groovy | 78 +++
.../GormQuerySafetyTransformerSpec.groovy | 543 ++++++++++++++++
.../en/guide/security/securingAgainstAttacks.adoc | 56 ++
.../src/en/guide/upgrading/upgrading80x.adoc | 21 +
8 files changed, 1421 insertions(+), 16 deletions(-)
copy
grails-datamapping-core/src/main/groovy/org/grails/datastore/gorm/query/transform/{GlobalDetachedCriteriaASTTransformation.java
=> GlobalGormQuerySafetyASTTransformation.java} (50%)
create mode 100644
grails-datamapping-core/src/main/groovy/org/grails/datastore/gorm/query/transform/GormQuerySafetyTransformer.java
create mode 100644
grails-datamapping-core/src/test/groovy/org/grails/datastore/gorm/query/transform/GlobalGormQuerySafetyASTTransformationSpec.groovy
create mode 100644
grails-datamapping-core/src/test/groovy/org/grails/datastore/gorm/query/transform/GormQuerySafetyTransformerSpec.groovy
