vcscsvcscs/GenerationsHeritage
1
0
Fork 0
mirror of https://github.com/vcscsvcscs/GenerationsHeritage.git synced 2025-08-12 22:09:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix viewPerson query to be secure

Browse Source
This commit is contained in:
Vargha Csongor
2024-04-18 21:01:52 +02:00
parent 5e8cdecca7
commit 5d03c51097
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
backend/handlers/viewPerson.go
View File

@@ -2,7 +2,6 @@ package handlers
import (
"context"
"fmt"
"log"
"net/http"
"time"
@@ -25,9 +24,8 @@ func ViewPerson(driver neo4j.DriverWithContext) gin.HandlerFunc {
return
}
query := fmt.Sprintf("MATCH (n:Person) WHERE n.ID = '%s' RETURN n;", id)
result, err := session.Run(ctx, query, nil)
result, err := session.Run(ctx, "MATCH (n:Person) WHERE n.ID = $person_id RETURN n;", map[string]any{"person_id": id})
if err != nil {
log.Println(err)
c.JSON(http.StatusInternalServerError, gin.H{"error": "internal server error"})