Skip to content

DataDefinitionUtil should throw error when ecounter names with SQL injection risk, but didn't #4255

@vee-huyvunguyen

Description

@vee-huyvunguyen

Describe the bug

  • There is an existing test, that expects the database object names validation to throw error, when validate string "NAME--"
    • Path: fhir-database-utils/src/test/java/org/linuxforhealth/fhir/database/utils/common/DataDefinitionUtilTest.java
  • The function failed the test, validating the object name "NAME--"

Environment

  • Version of LinuxForHealth FHIR Server: 5.1.1

To Reproduce
Steps to reproduce the behavior:

  1. Fork the repo from the main branch
  2. Setting up the development environment using this guide:
    • At the step of building the project: Execute mvn clean install -f fhir-parent (Without skipping the tests, removed -DskipTests)

Expected behavior
All tests passed

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions