Skip to content

Improve CQL Injection Query #200

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
wants to merge 9 commits into
base: main
Choose a base branch
from

Conversation

jeongsoolee09
Copy link
Contributor

What this PR contributes

  • Improve CQL Injection Query.
    • Expand base objects as possible receivers of methods .run and property read entities:
      • EntityEntry now includes property reads from srv.entities, e.g. const { Entity } = srv.entities.
      • A new class CqlQueryRunnerCall now expands and replaces TaintedCqlClause, now covering cds.run, cds.db.run, srv.run.
  • Add robust test cases.
    • Service1, when receiving event send11 through send15, runs query on the database service using cds.run.
    • Service1, when receiving event send21 through send25, runs query on itself by await-ing the query.
    • Service1, when receiving event send31 through send35, runs query on Service2 by srv.run where srv is an instance of Service2.

@jeongsoolee09 jeongsoolee09 marked this pull request as draft June 19, 2025 13:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant