We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 16c6157 commit d26d930Copy full SHA for d26d930
javascript/frameworks/cap/test/queries/cqlinjection/srv/service1.js
@@ -592,9 +592,9 @@ module.exports = class Service1 extends cds.ApplicationService {
592
/* ========== 12. Service1 running query on the database service using `cds.db.tx( tx => tx.run(...) )` and friends ========== */
593
this.on("send121", async (req) => {
594
const { id } = req.data;
595
- const query = SELECT.from`Entity1`.where("ID=" + id); // UNSAFE: direct concatenation with `+`
+ const query = SELECT.from`Entity1`.where("ID=" + id);
596
cds.db.tx(async (tx) => {
597
- tx.run(query);
+ tx.run(query); // UNSAFE: direct concatenation with `+`
598
});
599
600
0 commit comments