Skip to content

Prevent SOQL Injection #1

@pbattisson

Description

@pbattisson

The following lines would allow a SOQL injection attack. Ensure query string is escaped before being run.

@AuraEnabled
public static List<SObject> runQuery(String query) {
return Database.query(query);
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions