Manthan Surkar created FINERACT-1156:
----------------------------------------

             Summary: SQL injection error with Run Reports
                 Key: FINERACT-1156
                 URL: https://issues.apache.org/jira/browse/FINERACT-1156
             Project: Apache Fineract
          Issue Type: Bug
            Reporter: Manthan Surkar


As reported by Matt 
He faced the SQL injection error while trying to run reports for Active Loans 
(Pentaho).

After investigating a bit, I found all the the report names that had a "(" 
faced this issue, this turns out to be a problem with the regex that was 
designed to accept the report names.


Unrelated: 
This module has a lot of SQL string concatenation and a good place to use our 
SQLbuilder module ( I will take this)

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to