diff options
| author | Xavier Morel <xmo@odoo.com> | 2020-06-23 10:27:20 +0000 |
|---|---|---|
| committer | Xavier Morel <xmo@odoo.com> | 2020-07-10 07:12:35 +0000 |
| commit | e162e6f714e725553cf41e21e160c09f5d107d81 (patch) | |
| tree | 3d24fc91c0edce70d4eb698910d87fcd9f9afc15 /setup | |
| parent | 7be1429656af3c96ac30caed28a27f5b9590009f (diff) | |
[FIX] test_lint, *: false negative in sql injection linter
The linter would miss / fail to warn on injection of *local variables*
in some cases.
Try to improve it to be stricter and more reliable, after discussion
with odo, sql which is "correctly" dynamic should use psycopg2's sql
package in order to bypass the linter (bonus: it should also properly
escape & quote identifiers).
closes odoo/odoo#53938
Related: odoo/enterprise#11718
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
Diffstat (limited to 'setup')
0 files changed, 0 insertions, 0 deletions