Chris Hill-Scott bdd77f9150 Escape special characters in search by recipient ...

SQLAlchemy handles escaping anything that could allow a SQL injection
attack. But it doesn’t escape the characters used for wildcard
searching. This is the reason we’re able to do `.like('%example%')`
at all.

But we shouldn’t be letting our users search with wildcard characters,
so we need to escape them. Which is what this commit does.

2018-03-14 10:51:34 +00:00

..

notification_dao

Escape special characters in search by recipient

2018-03-14 10:51:34 +00:00

__init__.py

…

test_annual_billing_dao.py

don't update current year twice

2017-12-06 14:45:44 +00:00

test_api_key_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_daily_sorted_letter_dao.py

Create DAO for daily sorted letter model

2018-03-06 09:09:02 +00:00

test_date_utils.py

…

test_email_branding_dao.py

create, edit and use email branding instead of organisation

2018-02-06 11:23:34 +00:00

test_events_dao.py

…

test_inbound_numbers_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_inbound_sms_dao.py

A little clean up

2017-12-28 10:58:15 +00:00

test_invited_user_dao.py

…

test_jobs_dao.py

Stop populating job-statistics table when creating a job

2018-03-12 10:48:46 +00:00

test_letter_rate_dao.py

Insert initial letter rates.

2017-12-06 16:40:38 +00:00

test_monthly_billing.py

Update test

2017-12-15 10:47:55 +00:00

test_notification_usage_dao.py

Update montly billing with letters

2017-12-14 17:17:05 +00:00

test_organisation_dao.py

Removed the check for active user when adding a user to an organisation

2018-02-23 10:45:18 +00:00

test_permissions_dao.py

…

test_provider_details_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_provider_rates_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_provider_statistics_dao.py

…

test_service_callback_api_dao.py

CodeStyle correction

2017-11-30 09:38:57 +00:00

test_service_email_reply_to_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_service_inbound_api_dao.py

…

test_service_letter_contact_dao.py

…

test_service_permissions_dao.py

…

test_service_sms_sender_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_service_whitelist_dao.py

more flake8. lots of unused imports and variables that didn't get used. i tried to preserve old variable names as comments when it looked like they were useful (eg when they were describing timestamps)

2017-11-28 17:23:09 +00:00

test_services_dao.py

exclude test keys from template usage page

2018-02-06 14:31:12 +00:00

test_stats_template_usage_by_month_dao.py

Refactor is_precompiled_letter to model

2018-03-07 23:03:03 +00:00

test_templates_dao.py

Refactor is_precompiled_letter to model

2018-03-07 23:03:03 +00:00

test_users_dao.py

…