Issue #829464 by Berdir, Github sync, sepgil: Orderby() should escape fields and verify direction.
parent
29bf9e89
Showing
- core/lib/Drupal/Core/Database/Query/Select.php 3 additions, 1 deletioncore/lib/Drupal/Core/Database/Query/Select.php
- core/lib/Drupal/Core/Database/Query/SelectInterface.php 12 additions, 2 deletionscore/lib/Drupal/Core/Database/Query/SelectInterface.php
- core/lib/Drupal/Core/Database/Query/TableSortExtender.php 3 additions, 4 deletionscore/lib/Drupal/Core/Database/Query/TableSortExtender.php
- core/lib/Drupal/Core/Entity/Query/Sql/Query.php 2 additions, 2 deletionscore/lib/Drupal/Core/Entity/Query/Sql/Query.php
- core/lib/Drupal/Core/Entity/Query/Sql/QueryAggregate.php 1 addition, 1 deletioncore/lib/Drupal/Core/Entity/Query/Sql/QueryAggregate.php
- core/modules/comment/comment.module 4 additions, 2 deletionscore/modules/comment/comment.module
- core/tests/Drupal/Tests/Core/Database/OrderByTest.php 63 additions, 0 deletionscore/tests/Drupal/Tests/Core/Database/OrderByTest.php
Loading
Please register or sign in to comment