Commit 783e400d authored by Committed by Evan Prodromou
Potential SQL injection in Local_group::setNickname()
This change escapes a parameter in Local_group::setNickname(). Review of the code paths that call this function sanitize the parameter higher up the stack, but it's escaped here to prevent mistakes later. Note that nickname parameters are normally alphanum strings, so there's not much danger in double-escaping them.
Showing with 1 addition and 1 deletion