]> git.openstreetmap.org Git - nominatim.git/commit
only allow alphanumeric and dash in DATABASE_WEBUSER
authorSarah Hoffmann <lonvia@denofr.de>
Mon, 9 Feb 2026 20:07:31 +0000 (21:07 +0100)
committerSarah Hoffmann <lonvia@denofr.de>
Tue, 10 Feb 2026 10:39:17 +0000 (11:39 +0100)
commite17d0cb5cf314a5bcd66a9bfee16e760ce26cde7
tree80c96b777281c8f31c57676cc6ccf102d5c7cb23
parent7a62c7d812af39a2fb8d86e02fad05a685c289cb
only allow alphanumeric and dash in DATABASE_WEBUSER

This variable is used a lot in raw SQL. Avoid injection issues.
src/nominatim_db/config.py
test/python/config/test_config.py
test/python/tools/test_database_import.py