Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: reject invalid order parameter values DHIS2-16935 [2.40] #16713

Merged
merged 1 commit into from
Mar 6, 2024

Conversation

teleivo
Copy link
Contributor

@teleivo teleivo commented Mar 6, 2024

backport of #16673

  • without changes to how we deal with UIDs as the common.UID is only used for OpenAPI in 2.40
  • remove StringToOrderCriteriaListConverter.java which was not used in < 2.40 instead of the OrderCriteriaParamEditor in 2.41
  • also backported rejecting invalid sort directions which was previously replaced with the default order of ASC

2.39 and older

Older versions also suffer from this bug. Behavior is likely as for 2.40.3 described in table https://dhis2.atlassian.net/browse/DHIS2-16935. We have not backported many of the changes that this fix relies on in the CrudControllerAdvice. For us to fix the behavior in older versions we would need to backport these changes first. We will wait for @enricocolasante to decide if/how to backport any changes and a fix.

@teleivo teleivo force-pushed the DHIS2-16935-2.40 branch from e2bfa48 to 30fce5b Compare March 6, 2024 09:25
@teleivo teleivo force-pushed the DHIS2-16935-2.40 branch from 30fce5b to 835e80d Compare March 6, 2024 09:46
Copy link

sonarcloud bot commented Mar 6, 2024

@teleivo teleivo requested review from jbee and a team March 6, 2024 09:59
@teleivo teleivo changed the title fix: reject invalid order parameter values DHIS2-16935 fix: reject invalid order parameter values DHIS2-16935 [2.40] Mar 6, 2024
@teleivo teleivo merged commit 099327d into 2.40 Mar 6, 2024
14 checks passed
@teleivo teleivo deleted the DHIS2-16935-2.40 branch March 6, 2024 10:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants