Skip to content

E
esi-table-data
Commit 36ed6bf6 authored by Vasyl Bodnaruk's avatar Vasyl Bodnaruk
Browse files
Options

Change block word

parent c564c327
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 1 deletion
esi/scraper/views.py
View file @ 36ed6bf6
...@@ -91,7 +91,8 @@ class NewJobCreateView(CreateView): ...@@ -91,7 +91,8 @@ class NewJobCreateView(CreateView):
return HttpResponseRedirect(reverse('job_list')) return HttpResponseRedirect(reverse('job_list'))
def _validate_query(self, query): def _validate_query(self, query):
block = [';', 'in', 'select'] query = query.lower()
block = [';', 'select', 'alter', 'drop', 'truncate', 'update']
if any(ext in query for ext in block): if any(ext in query for ext in block):
print('Query is blocked') print('Query is blocked')
return BAD_QUERY return BAD_QUERY
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment