feathers

feathers copied to clipboard

When a parameter is used in a service query, a SQL error occurs:

BadRequest(400): select `items`.* from `items` where `nonexistingField` = 'test' - SQLITE_ERROR: no such column: nonexistingField

Can FeathersJS limit the allowed fields and columns to be used in the query before actually running a query?

Any column can be attempted from the outside, what if there is a column type that can be exploited?

This can be solved using feathers-schema and its queryProperty helper function.

Closing this since the best solution is indeed using schemas in a v5 app