SuperSeriousBusiness/GoToSocial
1
1
Fork 0
mirror of https://github.com/superseriousbusiness/gotosocial synced 2025-06-05 21:59:39 +02:00
Code Issues Projects Releases Wiki Activity

[chore]: Bump github.com/jackc/pgx/v5 from 5.5.3 to 5.5.5 (#2747)

Browse Source
This commit is contained in:
dependabot[bot]
2024-03-11 10:13:33 +00:00
committed by GitHub
parent e24efcac8b
commit d115f9ebc4
67 changed files with 515 additions and 385 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
vendor/github.com/jackc/pgx/v5/internal/sanitize/sanitize.go generated vendored
View File

@ -63,6 +63,10 @@ func (q *Query) Sanitize(args ...any) (string, error) {
return "", fmt.Errorf("invalid arg type: %T", arg)
}
argUse[argIdx] = true
// Prevent SQL injection via Line Comment Creation
// https://github.com/jackc/pgx/security/advisories/GHSA-m7wr-2xf7-cm9p
str = " " + str + " "
default:
return "", fmt.Errorf("invalid Part type: %T", part)
}