silverstripe-restfulapi
silverstripe-restfulapi copied to clipboard
Correctly parse $queryParams
$queryParams should be parsed and validated before executing against database.
On GET request for filtered data if one modifier value is empty server responds with the full result set.
api/model?Title__StartsWith=
For more robustness this should result in a 400 Bad Request.
Similarly,
api/model/?URL__StartsWith=
Results in a 500 Internal Server Error.