GrottoCenter / grottocenter-api

85%

develop: 85%

LAST BUILD ON BRANCH fix/sql-injection-bibliographic-search

branch: fix/sql-injection-bibliographic-search

CHANGE BRANCH

x

Reset

• fix/sql-injection-bibliographic-search
• 1015-notifications-add-more-notification-creations
• 1086-document-create-edit-dont-download-file-if-url-is-provided
• 1092-notification-dont-work-for-description-and-location
• 881-notifications-system
• 882-notification-create-and-mark-as-read
• 998-duplicate-dashboard-dont-work
• Add-.obj-files
• UpdateTimeExportDBJson
• add-cds-30-partner-and-rapport-doc-type
• add-rapport-doc-type
• admin-view-sensitive-coordinate
• auth-switch-to-argon2
• bugfix/bug-866
• bugfix/fix-1049
• bugfix/fix-geoloc-info
• bugfix/interval-duration-fix-1032
• caver-refactor
• chore/adds-audit-logs
• chore/dependencies
• chore/fix-my-email
• chore/fix_coveralls
• chore/health-endpoint
• chore/update-dependencies
• count-deleted-entities
• db-export
• db/add_admin1
• db/add_admin1_admin2
• db/add_admin2
• db/update_undefined_entities
• dependabot/npm_and_yarn/archiver-6.0.1
• dependabot/npm_and_yarn/argon2-0.30.3
• dependabot/npm_and_yarn/argon2-0.41.1
• dependabot/npm_and_yarn/argon2-0.44.0
• dependabot/npm_and_yarn/async-3.2.5
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.163.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.169.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.171.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.179.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.183.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.186.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.190.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.194.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.200.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.204.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.216.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.218.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.222.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.224.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.241.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.245.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.262.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.264.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.272.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.282.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.303.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.312.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.321.1
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.335.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.344.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.345.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.363.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.370.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.382.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.405.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.421.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.484.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.504.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.509.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.682.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.699.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.716.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.738.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.758.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.940.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.958.0
• dependabot/npm_and_yarn/aws-sdk/client-ses-3.980.0
• dependabot/npm_and_yarn/azure/storage-blob-12.12.0
• dependabot/npm_and_yarn/azure/storage-blob-12.13.0
• dependabot/npm_and_yarn/azure/storage-blob-12.14.0
• dependabot/npm_and_yarn/azure/storage-blob-12.15.0
• dependabot/npm_and_yarn/azure/storage-blob-12.16.0
• dependabot/npm_and_yarn/azure/storage-blob-12.17.0
• dependabot/npm_and_yarn/azure/storage-blob-12.26.0
• dependabot/npm_and_yarn/azure/storage-blob-12.30.0
• dependabot/npm_and_yarn/babel/runtime-7.28.6
• dependabot/npm_and_yarn/babel/traverse-7.23.2
• dependabot/npm_and_yarn/body-parser-2.2.1
• dependabot/npm_and_yarn/braces-3.0.3
• dependabot/npm_and_yarn/commitlint/cli-17.1.2
• dependabot/npm_and_yarn/commitlint/cli-17.2.0
• dependabot/npm_and_yarn/commitlint/cli-17.3.0
• dependabot/npm_and_yarn/commitlint/cli-17.4.4
• dependabot/npm_and_yarn/commitlint/cli-17.5.1
• dependabot/npm_and_yarn/commitlint/cli-17.6.5
• dependabot/npm_and_yarn/commitlint/cli-17.6.6
• dependabot/npm_and_yarn/commitlint/cli-17.6.7
• dependabot/npm_and_yarn/commitlint/cli-17.7.1
• dependabot/npm_and_yarn/commitlint/cli-17.7.2
• dependabot/npm_and_yarn/commitlint/cli-19.6.0
• dependabot/npm_and_yarn/commitlint/cli-19.6.1
• dependabot/npm_and_yarn/commitlint/cli-19.7.1
• dependabot/npm_and_yarn/commitlint/cli-20.3.0
• dependabot/npm_and_yarn/commitlint/cli-20.4.0
• dependabot/npm_and_yarn/commitlint/config-conventional-17.1.0
• dependabot/npm_and_yarn/commitlint/config-conventional-17.2.0
• dependabot/npm_and_yarn/commitlint/config-conventional-17.3.0
• dependabot/npm_and_yarn/commitlint/config-conventional-17.4.2
• dependabot/npm_and_yarn/commitlint/config-conventional-17.6.1
• dependabot/npm_and_yarn/commitlint/config-conventional-17.6.5
• dependabot/npm_and_yarn/commitlint/config-conventional-17.6.6
• dependabot/npm_and_yarn/commitlint/config-conventional-17.6.7
• dependabot/npm_and_yarn/commitlint/config-conventional-19.6.0
• dependabot/npm_and_yarn/commitlint/config-conventional-19.7.1
• dependabot/npm_and_yarn/commitlint/config-conventional-20.3.0
• dependabot/npm_and_yarn/commitlint/config-conventional-20.4.0
• dependabot/npm_and_yarn/core-js-3.25.0
• dependabot/npm_and_yarn/core-js-3.25.1
• dependabot/npm_and_yarn/core-js-3.25.2
• dependabot/npm_and_yarn/core-js-3.25.3
• dependabot/npm_and_yarn/core-js-3.25.5
• dependabot/npm_and_yarn/core-js-3.26.0
• dependabot/npm_and_yarn/core-js-3.26.1
• dependabot/npm_and_yarn/core-js-3.27.1
• dependabot/npm_and_yarn/core-js-3.27.2
• dependabot/npm_and_yarn/core-js-3.29.0
• dependabot/npm_and_yarn/core-js-3.29.1
• dependabot/npm_and_yarn/core-js-3.30.0
• dependabot/npm_and_yarn/core-js-3.30.1
• dependabot/npm_and_yarn/core-js-3.30.2
• dependabot/npm_and_yarn/core-js-3.31.0
• dependabot/npm_and_yarn/date-io/date-fns-2.16.0
• dependabot/npm_and_yarn/decode-uri-component-0.2.2
• dependabot/npm_and_yarn/dotenv-16.0.2
• dependabot/npm_and_yarn/dotenv-16.0.3
• dependabot/npm_and_yarn/dotenv-16.1.3
• dependabot/npm_and_yarn/dotenv-16.1.4
• dependabot/npm_and_yarn/dotenv-16.3.1
• dependabot/npm_and_yarn/ejs-3.1.10
• dependabot/npm_and_yarn/ejs-3.1.9
• dependabot/npm_and_yarn/engine.io-3.6.1
• dependabot/npm_and_yarn/eslint-8.23.0
• dependabot/npm_and_yarn/eslint-8.23.1
• dependabot/npm_and_yarn/eslint-8.24.0
• dependabot/npm_and_yarn/eslint-8.25.0
• dependabot/npm_and_yarn/eslint-8.26.0
• dependabot/npm_and_yarn/eslint-8.27.0
• dependabot/npm_and_yarn/eslint-8.28.0
• dependabot/npm_and_yarn/eslint-8.29.0
• dependabot/npm_and_yarn/eslint-8.31.0
• dependabot/npm_and_yarn/eslint-8.35.0
• dependabot/npm_and_yarn/eslint-8.37.0
• dependabot/npm_and_yarn/eslint-8.39.0
• dependabot/npm_and_yarn/eslint-8.46.0
• dependabot/npm_and_yarn/eslint-8.48.0
• dependabot/npm_and_yarn/eslint-8.50.0
• dependabot/npm_and_yarn/eslint-config-prettier-8.6.0
• dependabot/npm_and_yarn/eslint-config-prettier-8.8.0
• dependabot/npm_and_yarn/eslint-config-prettier-8.9.0
• dependabot/npm_and_yarn/eslint-config-prettier-9.0.0
• dependabot/npm_and_yarn/eslint-config-prettier-9.1.0
• dependabot/npm_and_yarn/eslint-plugin-import-2.28.1
• dependabot/npm_and_yarn/eslint-plugin-import-2.29.1
• dependabot/npm_and_yarn/eslint-plugin-prettier-5.5.5
• dependabot/npm_and_yarn/express-rate-limit-6.10.0
• dependabot/npm_and_yarn/express-rate-limit-6.6.0
• dependabot/npm_and_yarn/express-rate-limit-6.7.0
• dependabot/npm_and_yarn/express-rate-limit-6.8.1
• dependabot/npm_and_yarn/express-rate-limit-7.0.2
• dependabot/npm_and_yarn/express-rate-limit-7.1.5
• dependabot/npm_and_yarn/fast-xml-parser-and-aws-sdk/client-ses-4.2.4
• dependabot/npm_and_yarn/fast-xml-parser-and-aws-sdk/client-ses-4.2.5
• dependabot/npm_and_yarn/fixted-4.0.1
• dependabot/npm_and_yarn/fixted-4.0.2
• dependabot/npm_and_yarn/fixted-4.1.0
• dependabot/npm_and_yarn/fixted-4.2.0
• dependabot/npm_and_yarn/fixted-4.2.1
• dependabot/npm_and_yarn/fixted-4.2.5
• dependabot/npm_and_yarn/fixted-4.2.6
• dependabot/npm_and_yarn/fixted-4.2.7
• dependabot/npm_and_yarn/grunt-1.6.1
• dependabot/npm_and_yarn/grunt-eslint-24.0.1
• dependabot/npm_and_yarn/grunt-eslint-24.1.0
• dependabot/npm_and_yarn/grunt-eslint-24.2.0
• dependabot/npm_and_yarn/husky-8.0.2
• dependabot/npm_and_yarn/husky-8.0.3
• dependabot/npm_and_yarn/husky-9.1.6
• dependabot/npm_and_yarn/husky-9.1.7
• dependabot/npm_and_yarn/json-schema-0.4.0
• dependabot/npm_and_yarn/json-schema-and-jsprim-0.4.0
• dependabot/npm_and_yarn/json5-1.0.2
• dependabot/npm_and_yarn/jsonwebtoken-9.0.0
• dependabot/npm_and_yarn/jsonwebtoken-9.0.1
• dependabot/npm_and_yarn/jsonwebtoken-9.0.2
• dependabot/npm_and_yarn/knex-and-machinepack-postgresql-2.4.2
• dependabot/npm_and_yarn/lint-staged-13.0.4
• dependabot/npm_and_yarn/lint-staged-13.1.0
• dependabot/npm_and_yarn/lint-staged-13.1.2
• dependabot/npm_and_yarn/lint-staged-13.2.0
• dependabot/npm_and_yarn/lint-staged-13.2.2
• dependabot/npm_and_yarn/lint-staged-13.2.3
• dependabot/npm_and_yarn/lint-staged-15.2.0
• dependabot/npm_and_yarn/lint-staged-15.2.1
• dependabot/npm_and_yarn/lint-staged-15.2.10
• dependabot/npm_and_yarn/lint-staged-16.2.7
• dependabot/npm_and_yarn/mime-types-3.0.2
• dependabot/npm_and_yarn/minimatch-3.0.8
• dependabot/npm_and_yarn/minimist-and-mkdirp-1.2.6
• dependabot/npm_and_yarn/mocha-10.1.0
• dependabot/npm_and_yarn/mocha-10.4.0
• dependabot/npm_and_yarn/mocha-10.7.3
• dependabot/npm_and_yarn/mocha-10.8.2
• dependabot/npm_and_yarn/mocha-11.0.1
• dependabot/npm_and_yarn/mocha-11.1.0
• dependabot/npm_and_yarn/multi-0857adbe72
• dependabot/npm_and_yarn/multi-1fca067a76
• dependabot/npm_and_yarn/multi-45cd989388
• dependabot/npm_and_yarn/multi-58f033dd5f
• dependabot/npm_and_yarn/multi-60f2582fdd
• dependabot/npm_and_yarn/multi-827c8bdc81
• dependabot/npm_and_yarn/multi-87721684dc
• dependabot/npm_and_yarn/multi-94ac83efd4
• dependabot/npm_and_yarn/multi-c4515cc7e7
• dependabot/npm_and_yarn/multi-d1e6dc6edf
• dependabot/npm_and_yarn/multi-d2a14255b0
• dependabot/npm_and_yarn/natlibfi/marc-record-10.0.1
• dependabot/npm_and_yarn/natlibfi/marc-record-serializers-11.0.0
• dependabot/npm_and_yarn/nodemon-2.0.20
• dependabot/npm_and_yarn/nodemon-2.0.22
• dependabot/npm_and_yarn/prettier-2.8.0
• dependabot/npm_and_yarn/prettier-2.8.1
• dependabot/npm_and_yarn/prettier-2.8.4
• dependabot/npm_and_yarn/prettier-2.8.7
• dependabot/npm_and_yarn/prettier-2.8.8
• dependabot/npm_and_yarn/prettier-3.3.3
• dependabot/npm_and_yarn/prettier-3.4.1
• dependabot/npm_and_yarn/prettier-3.4.2
• dependabot/npm_and_yarn/prettier-3.5.2
• dependabot/npm_and_yarn/prettier-3.7.3
• dependabot/npm_and_yarn/qs-and-express-and-sails-6.5.3
• dependabot/npm_and_yarn/qs-and-skipper-6.5.3
• dependabot/npm_and_yarn/qs-and-waterline-utils-6.5.3
• dependabot/npm_and_yarn/ramda-0.29.0
• dependabot/npm_and_yarn/redis-and-machinepack-redis-3.1.1
• dependabot/npm_and_yarn/response-time-2.3.3
• dependabot/npm_and_yarn/sails-1.5.13
• dependabot/npm_and_yarn/sails-1.5.14
• dependabot/npm_and_yarn/sails-1.5.5
• dependabot/npm_and_yarn/sails-1.5.6
• dependabot/npm_and_yarn/sails-1.5.8
• dependabot/npm_and_yarn/sails-1.5.9
• dependabot/npm_and_yarn/semver-and-captains-log-and-skipper-7.5.2
• dependabot/npm_and_yarn/semver-and-semver-and-semver-and-sails-and-sails-hook-sockets-and-machinepack-postgresql-and-commitlint/is-ignored-and-nodemon-7.5.2
• dependabot/npm_and_yarn/sinon-21.0.1
• dependabot/npm_and_yarn/snyk/protect-1.1002.0
• dependabot/npm_and_yarn/snyk/protect-1.1006.0
• dependabot/npm_and_yarn/snyk/protect-1.1012.0
• dependabot/npm_and_yarn/snyk/protect-1.1020.0
• dependabot/npm_and_yarn/snyk/protect-1.1026.0
• dependabot/npm_and_yarn/snyk/protect-1.1032.0
• dependabot/npm_and_yarn/snyk/protect-1.1041.0
• dependabot/npm_and_yarn/snyk/protect-1.1047.0
• dependabot/npm_and_yarn/snyk/protect-1.1054.0
• dependabot/npm_and_yarn/snyk/protect-1.1056.0
• dependabot/npm_and_yarn/snyk/protect-1.1064.0
• dependabot/npm_and_yarn/snyk/protect-1.1065.0
• dependabot/npm_and_yarn/snyk/protect-1.1080.0
• dependabot/npm_and_yarn/snyk/protect-1.1094.0
• dependabot/npm_and_yarn/snyk/protect-1.1133.0
• dependabot/npm_and_yarn/snyk/protect-1.1171.0
• dependabot/npm_and_yarn/snyk/protect-1.1173.0
• dependabot/npm_and_yarn/snyk/protect-1.1187.0
• dependabot/npm_and_yarn/snyk/protect-1.997.0
• dependabot/npm_and_yarn/socket.io-parser-3.3.3
• dependabot/npm_and_yarn/socket.io-parser-3.4.3
• dependabot/npm_and_yarn/supertest-6.3.0
• dependabot/npm_and_yarn/supertest-6.3.1
• dependabot/npm_and_yarn/supertest-6.3.4
• dependabot/npm_and_yarn/supertest-7.0.0
• dependabot/npm_and_yarn/supertest-7.2.2
• dependabot/npm_and_yarn/tar-6.2.1
• dependabot/npm_and_yarn/trim-newlines-3.0.1
• dependabot/npm_and_yarn/validator-and-anchor-13.7.0
• dependabot/npm_and_yarn/word-wrap-1.2.4
• dependabot/npm_and_yarn/xml2js-0.5.0
• dependabot/npm_and_yarn/xml2js-0.6.0
• dependabot/npm_and_yarn/yaml-2.2.2
• deploy-push-develop
• develop
• document-refactor
• extend-subject-table
• feat-delete-cave-entrance
• feat-delete-caver
• feat-delete-document
• feat-delete-grotto-massif
• feat-delete-simple-entities
• feat-grotto-mergeinto
• feat-new-search
• feat-pg-cron
• feat/massif-area-limit
• feat/notif_improvements
• feat/oai-optimization
• feat/oai-paginated-endpoints
• feature/adds-exploring-organizations-in-cave-response
• feature/adds-region-page-support
• feature/allow-admin-unsubscribe-anyone
• feature/allow-many-documents-to-many-entrances
• feature/allow-user-to-add-remove-caves-from-his-list
• feature/aws-to-azure
• feature/better-log
• feature/better-log-2
• feature/bibliographic-metadata-improvement-types
• feature/bibliographic_metadata_model
• feature/country-data
• feature/database_record_table
• feature/deleted-entrance-1075
• feature/docker-improv
• feature/elastic-search-handle-deleted
• feature/entrance-quality-data
• feature/get-authors-and-contributors
• feature/get-massif-data
• feature/homepage-data
• feature/issue-862
• feature/marc_convertor
• feature/oai-endpoints
• feature/organization-enhancement
• feature/paginates-entrances-with-quality-endpoints
• feature/pagination-get-authors
• feature/polytech-dashboard
• feature/polytech_entrance_snapshots
• feature/polytech_historisation
• feature/polytech_snapshot_restore
• feature/refresh-bibliographic-metadata
• feature/relevance-ordering
• feature/remove-2000-length-polygone
• feature/search-bibliographic-metadata
• fetch-location-from-coordinate
• fix-comment-cannot-unset-ratings-or-durations
• fix-delete-entrance
• fix-delete-restore-issues
• fix-document-duplicate-csv-import
• fix-document-file
• fix-entrance-coordinates-country
• fix-entrance-move-no-cave
• fix-export-missing-sub-entities
• fix-issensitive-filtering
• fix-lint
• fix-massif-sensitive-entrance
• fix-not-populated-authorizationdocument
• fix-search-sensitive-entrance
• fix/1088-doc-language-edit
• fix/1157_rate_limits
• fix/500-source.filter
• fix/500-source.filter-root
• fix/argon2
• fix/cannot-access-azure-blob
• fix/cannot-update-entrance-name
• fix/csv-export-nested-objects
• fix/date-publication-prefix-filter
• fix/date-publication-range-filter
• fix/db-query-latency
• fix/duplicated-entrances-in-country
• fix/fixes
• fix/h-name-varchar-limit
• fix/mappingService
• fix/name-service-batch-query
• fix/notifications
• fix/person
• fix/search-prefix-filter-max-candidates
• fix/search-z3950
• fix/swagger
• fix/test-get-statistics
• improvement/generation-marc-record
• improvement/marc-record
• improvements
• list-latest-contributions
• master
• package-cleaning
• refa-right
• refactor-cave-find-update
• refactor-entrance-entities
• refs/heads/880-subscriptions-add-remove-subscriptions-to-massif-countries
• refs/heads/881-notifications-system
• refs/heads/981-document-edit-error-when-you-want-to-modify-a-document-during-the-validation-process
• refs/heads/982-production-debug-error-are-not-logged-anymore-in-cloudwatch
• refs/heads/dependabot/npm_and_yarn/aws-sdk/client-ses-3.150.0
• refs/heads/dependabot/npm_and_yarn/aws-sdk/client-ses-3.154.0
• refs/heads/dependabot/npm_and_yarn/sails-1.5.3
• refs/heads/dependabot/npm_and_yarn/sails-disk-2.1.2
• refs/heads/dependabot/npm_and_yarn/sails-hook-orm-4.0.2
• refs/heads/dependabot/npm_and_yarn/sails-hook-sockets-2.0.3
• refs/heads/dependabot/npm_and_yarn/sails-postgresql-5.0.1
• refs/heads/dependabot/npm_and_yarn/snyk/protect-1.990.0
• refs/heads/develop
• refs/heads/feature/issue977
• refs/heads/fix/doc_files
• refs/heads/list-latest-contributions
• refs/heads/master
• refs/tags/22.0.31
• refs/tags/v22.0.19
• refs/tags/v22.0.20
• refs/tags/v22.0.21
• refs/tags/v22.0.22
• refs/tags/v22.0.23
• refs/tags/v22.0.24
• refs/tags/v22.0.25
• refs/tags/v22.0.26
• refs/tags/v22.0.27
• refs/tags/v22.0.28
• refs/tags/v22.0.29
• refs/tags/v22.0.30
• refs/tags/v23.0.0
• refs/tags/v23.0.10
• refs/tags/v23.0.11
• refs/tags/v23.0.12
• refs/tags/v23.0.13
• refs/tags/v23.0.2
• refs/tags/v23.0.3
• refs/tags/v23.0.4
• refs/tags/v23.0.5
• refs/tags/v23.0.6
• refs/tags/v23.0.7
• refs/tags/v23.0.8
• refs/tags/v23.0.9
• refs/tags/v24.0.0
• release/v22.0.22
• release/v22.0.27
• release/v22.0.28
• test/add_more_tests
• update-deps

Build # 21944664592

Build Type

Pull #1459

github

Committed by ClemRz

Commit Message

fix(search): parameterize title filter in bibliographic metadata search to prevent SQL injection

Pull Request Pull Request #1459: fix(search): parameterize title filter in bibliographic metadata search to prevent SQL injection

Run Details

2532 of 3129 branches covered (80.92%)

Branch coverage included in aggregate %.

3 of 3 new or added lines in 1 file covered. (100.0%)

5360 of 6138 relevant lines covered (87.32%)

23.27 hits per line