ckan / ckan / 5119

85%

master: 44%

push

travis-ci

[#1725] datastore_search and _delete don't work with multiple statements

What we're trying to avoid is for an insecure extension to allow a malicious
user to create queries like:

```
SELECT * FROM "foo" WHERE (1=1); DELETE FROM "foo"; -- AND "bar"='5');
```

This doesn't avoid all possible SQL injection vectors, but it's one less issue
to worry about.

31 of 31 new or added lines in 3 files covered. (100.0%)

33294 of 39212 relevant lines covered (84.91%)

1.69 hits per line