mirror of
https://github.com/versity/versitygw.git
synced 2026-09-05 07:37:03 +00:00
Ben McClellandGitHubCopilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>CodeQL flagged a possible unsafe quoting in ipa iam code. Code that constructs a quoted string literal containing user-provided data needs to ensure that this data does not itself contain a quote. Otherwise the embedded data could (accidentally or intentionally) terminate the string literal early and thereby change the structure of the overall string, with potentially severe consequences. If, for example, the string is later used as part of an operating-system command or database query, an attacker may be able to craft input data that injects a malicious command. Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>