#21181: collation specific query results ordering
-------------------------------------+-------------------------------------
Reporter: alan.kesselmann@… | Owner: Tom
| Carrick
Type: New feature | Status: assigned
Component: Database layer | Version:
(models, ORM) |
Severity: Normal | Resolution:
Keywords: ORM | Triage Stage: Accepted
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 1
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Comment (by Simon Charette):
Yes, `quote_name` cannot protect against SQL injections, it shouldn't be
an issue just like `Func(func)` also allows injections? As long as
`collation` is not under user control it should not be an issue.
Since collation names are identifiers and cannot be provided as string
literals (see comment:11) I don't see a way around that?
--
Ticket URL: <https://code.djangoproject.com/ticket/21181#comment:19>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/083.b61bac356c48e41b0e6087b8dd697be7%40djangoproject.com.
