morozov
Repos
54
Followers
61

Doctrine Database Abstraction Layer

0
0

Change data capture for a variety of databases. Please log issues at https://issues.redhat.com/browse/DBZ.

0
0

Events

closed issue
Document security implications of changes in AbstractPlatform::get*Expression() methods

See https://github.com/doctrine/dbal/pull/5975#issuecomment-1483829146.

Created at 14 hours ago
delete branch
morozov delete branch issues/5977
Created at 16 hours ago

More upgrade documentation for OraclePlatform::getSubstringExpression()

Merge pull request #5978 from morozov/issues/5977

More upgrade documentation for OraclePlatform::getSubstringExpression()

Created at 16 hours ago
pull request closed
More upgrade documentation for OraclePlatform::getSubstringExpression()

This patch complements the changes implemented in https://github.com/doctrine/dbal/pull/3494. Closes https://github.com/doctrine/dbal/issues/5977.

Created at 16 hours ago
pull request opened
More upgrade documentation for OraclePlatform::getSubstringExpression()

This patch complements the changes implemented in https://github.com/doctrine/dbal/pull/3494. Closes https://github.com/doctrine/dbal/issues/5977.

Created at 1 day ago
create branch
morozov create branch issues/5977
Created at 1 day ago
issue comment
fix(platforms): LOCATE as an argument to SUBSTRING is silently replaced with 0 when converting DQL to SQL

I'm sorry but I don't have time for this. I only left my review because I was asked to.

Created at 1 day ago
opened issue
Document security implications of changes in AbstractPlatform::get*Expression() methods

See https://github.com/doctrine/dbal/pull/5975#issuecomment-1483829146.

Created at 3 days ago
issue comment
fix(platforms): LOCATE as an argument to SUBSTRING is silently replaced with 0 when converting DQL to SQL

This is potentially a breaking change, at least it's marked as such in https://github.com/doctrine/dbal/pull/3494. Additionally, it may have security implications (see https://github.com/doctrine/dbal/security/advisories/GHSA-r7cj-8hjg-x622).

We probably need to document the security implications of all such changes in 4.0.x but IMO this change is a no go for 3.x.

Created at 3 days ago