public inbox for [email protected]  
help / color / mirror / Atom feed
From: Dave Page <[email protected]>
To: [email protected]
Subject: pgAdmin 4 commit: Allow editing of data where a primary key column incl
Date: Thu, 25 Jul 2019 09:23:19 +0000
Message-ID: <[email protected]> (raw)

Allow editing of data where a primary key column includes a % sign in the value. Fixes #4036
Fix an XSS issue seen in View/Edit data mode if a column name includes HTML. Fixes #4367

Branch
------
electron2

Details
-------
https://git.postgresql.org/gitweb?p=pgadmin4.git;a=commitdiff;h=53d7b747000e3fbe8c35e0b18750c1e99f6b...
Author: Aditya Toshniwal <[email protected]>

Modified Files
--------------
docs/en_US/release_notes_4_9.rst                   |  4 +-
.../xss_checks_panels_and_query_tool_test.py       | 28 ++++++++++++-
web/pgadmin/tools/sqleditor/__init__.py            |  7 +++-
web/pgadmin/tools/sqleditor/command.py             | 46 ++++++++++++++++------
web/pgadmin/tools/sqleditor/static/js/sqleditor.js |  4 +-
.../templates/sqleditor/sql/default/insert.sql     |  2 +-
.../templates/sqleditor/sql/default/update.sql     |  2 +-
web/pgadmin/utils/driver/psycopg2/cursor.py        |  3 ++
web/regression/feature_utils/pgadmin_page.py       | 22 +++++++++++
web/regression/python_test_utils/test_utils.py     | 17 +++++---
10 files changed, 112 insertions(+), 23 deletions(-)



reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: pgAdmin 4 commit: Allow editing of data where a primary key column incl
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox