Skip to content

fix: reject mongo operators and out-of-choices classes in API references instead of querying with them - #3912

Merged
ThibaudDauce merged 2 commits into
mainfrom
fix/nosql-operator-injection-in-api-references
Aug 24, 2026
Merged

fix: reject mongo operators and out-of-choices classes in API references instead of querying with them#3912
ThibaudDauce merged 2 commits into
mainfrom
fix/nosql-operator-injection-in-api-references

Conversation

@ThibaudDauce

Copy link
Copy Markdown
Contributor

Fix OperationFailure api.reports

$where cannot be applied to a field, full error: {'ok': 0.0, 'errmsg': '$where cannot be applied to a field', 'code': 2, 'codeName': 'BadValue'}

Not really actionable today but we never know…

…jection-in-api-references

# Conflicts:
#	udata/tests/api/test_reports_api.py
@ThibaudDauce
ThibaudDauce merged commit 9324a1f into main Aug 24, 2026
1 check passed
@ThibaudDauce
ThibaudDauce deleted the fix/nosql-operator-injection-in-api-references branch August 24, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants