Skip to content

Conversation

@nicdavidson
Copy link
Contributor

Added filtering functionality to only show services that a user has a role for when pulling up API docs. Also resolved potential SQL injection vulnerability.

codyllord and others added 2 commits September 23, 2025 22:50
…tering

- Replace string concatenation with parameterized queries in Service::selectByRequest()
- Add input validation for service IDs (numeric check and type casting)
- Prevent SQL injection attacks in role-based access control filtering
- Maintain backward compatibility while securing database queries

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants