mirror of
https://github.com/ubicloud/ubicloud.git
synced 2025-10-10 00:31:57 +08:00
After these changes, the query parameterization log shows 0 queries with missed parameters. None of these usages are unsafe, since they are only in the specs and use trusted data, but direct interpolation patterns such as `'#{r1.id}'` are a bad idea in the specs, as it gives the impression to developers that such constructions are safe to use elsewhere in the application. Bad examples anywhere are a threat to safe usage everywhere. |
||
---|---|---|
.. | ||
dns_zone_nexus_spec.rb | ||
setup_dns_server_vm_spec.rb |