Issue 36: Preference.save_settings is insecure
Status:  Fixed
Owner: ----
Closed:  Apr 2008
Reported by shol...@gmail.com, Mar 4, 2008
What steps will reproduce the problem?
1. Try to save a store name with a ' in it

Could allow for sql injection
Mar 4, 2008
#1 shol...@gmail.com
Fixed with patch
issue_36.patch
507 bytes   View   Download
Apr 8, 2008
Project Member #2 subim...@gmail.com
Thank you, patched with revision #58
Status: Fixed