Chris Hill-Scott bdd77f9150 Escape special characters in search by recipient ...

SQLAlchemy handles escaping anything that could allow a SQL injection
attack. But it doesn’t escape the characters used for wildcard
searching. This is the reason we’re able to do `.like('%example%')`
at all.

But we shouldn’t be letting our users search with wildcard characters,
so we need to escape them. Which is what this commit does.

2018-03-14 10:51:34 +00:00

..

__init__.py

…

annual_billing_dao.py

don't update current year twice

2017-12-06 14:45:44 +00:00

api_key_dao.py

flake8 - remove unused imports and ensure they're always at the top of the file

2017-11-28 14:28:01 +00:00

daily_sorted_letter_dao.py

Create DAO for daily sorted letter model

2018-03-06 09:09:02 +00:00

dao_utils.py

…

date_util.py

- Add update dao_update_annual_billing_for_current_and_future_years

2017-11-02 12:38:43 +00:00

dvla_organisation_dao.py

…

email_branding_dao.py

create, edit and use email branding instead of organisation

2018-02-06 11:23:34 +00:00

events_dao.py

…

inbound_numbers_dao.py

Add new endpoint to get available inbound number.

2017-09-21 15:18:52 +01:00

inbound_sms_dao.py

Removed statsd from the api and use the statsd in the utils library.

2018-02-06 09:52:15 +00:00

invited_org_user_dao.py

add organisation invite rest and dao

2018-02-23 10:45:18 +00:00

invited_user_dao.py

…

jobs_dao.py

Stop populating job-statistics table when creating a job

2018-03-12 10:48:46 +00:00

letter_rate_dao.py

Insert initial letter rates.

2017-12-06 16:40:38 +00:00

monthly_billing_dao.py

Removed statsd from the api and use the statsd in the utils library.

2018-02-06 09:52:15 +00:00

notification_usage_dao.py

Removed statsd from the api and use the statsd in the utils library.

2018-02-06 09:52:15 +00:00

notifications_dao.py

Escape special characters in search by recipient

2018-03-14 10:51:34 +00:00

organisation_dao.py

Remove users relationship in organisations

2018-02-23 13:36:42 +00:00

permissions_dao.py

flake8 - remove unused imports and ensure they're always at the top of the file

2017-11-28 14:28:01 +00:00

provider_details_dao.py

…

provider_rates_dao.py

…

provider_statistics_dao.py

Remove NotificationStatistics

2017-11-01 15:02:50 +00:00

service_callback_api_dao.py

Bugs rectified

2017-11-30 12:39:19 +00:00

service_email_reply_to_dao.py

Remove unused methods

2017-11-20 14:45:11 +00:00

service_inbound_api_dao.py

Bugs rectified

2017-11-30 12:39:19 +00:00

service_letter_contact_dao.py

Remove unused methods

2017-11-20 14:45:11 +00:00

service_permissions_dao.py

flake8 - remove unused imports and ensure they're always at the top of the file

2017-11-28 14:28:01 +00:00

service_sms_sender_dao.py

Remove sms_sender from Service model.

2017-11-09 14:01:02 +00:00

service_whitelist_dao.py

flake8 - remove unused imports and ensure they're always at the top of the file

2017-11-28 14:28:01 +00:00

services_dao.py

Delete JobStatistics model

2018-03-12 10:48:46 +00:00

stats_template_usage_by_month_dao.py

Refactor is_precompiled_letter to model

2018-03-07 23:03:03 +00:00

templates_dao.py

Refactor is_precompiled_letter to model

2018-03-07 23:03:03 +00:00

users_dao.py

add email code verification

2017-11-07 16:45:49 +00:00