[CONJS-181] Local infile file validation doesn't take in account escaped value Created: 2021-11-24 Updated: 2022-01-24 Resolved: 2021-12-08 |
|
| Status: | Closed |
| Project: | MariaDB Connector/node.js |
| Component/s: | other |
| Affects Version/s: | None |
| Fix Version/s: | 2.5.6, 3.0.0 |
| Type: | Bug | Priority: | Major |
| Reporter: | Diego Dupin | Assignee: | Diego Dupin |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Description |
|
Connector validate local infile file name, but doesn't take in account escaped value, resulting in a wrong "Query cancelled. Check for malicious server / proxy" error message. |
| Comments |
| Comment by Diego Dupin [ 2021-12-08 ] |
|
this concerns windows "load local infile" commands. file name validation doesn't take in account escaping, resulting in a "Connector validate local infile file name, but doesn't take in account escaped value, resulting in a wrong "LOCAL INFILE wrong filename" error message. |