kobotoolbox / kpi / 28201137575

push

github

feat(search): restrict relational lookups in `q` searches (#7189)

## Summary

`q` searches build ORM filters from caller-supplied lookup paths, and
the search grammar allows arbitrary relational traversal (e.g.
`owner__username`). This restricts which lookups are accepted.

## Notes

- No new DB queries or joins; the generated SQL for accepted searches is
unchanged (sub-microsecond validation per term).
- Legitimate searches are unaffected (e.g. `owner__username`,
`parent__uid`, `settings__sector`, `asset_type`, `user__is_superuser`).

8764 of 12135 branches covered (72.22%)

32 of 34 new or added lines in 4 files covered. (94.12%)

28909 of 35983 relevant lines covered (80.34%)

4.89 hits per line