constrain cast parameters to letters only

2015-09-05 16:54:09 +03:00
parent cc418d3519
commit 92a1d8c7e3
1 changed files with 2 additions and 1 deletions
@@ -143,7 +143,8 @@ select table params =
 selectTerm :: QualifiedIdentifier -> T.Text -> PStmt
 selectTerm table col =
    case T.splitOn "::" col of
-        [colName,castTo] -> B.Stmt ("CAST (" <> pgFmtJsonbPath table (cs colName) <> " AS " <> castTo <> " )" <> asT (jsonbPath colName)) empty True
+        [colName,castTo] -> B.Stmt ("CAST (" <> pgFmtJsonbPath table (cs colName) <> " AS " <> castToSafe <> " )" <> asT (jsonbPath colName)) empty True
+            where castToSafe = T.filter ( `elem` ['a'..'z'] ) castTo
        _-> B.Stmt (pgFmtJsonbPath table (cs col) <> asT (jsonbPath col)) empty True
    where
        jsonbPath :: T.Text -> Maybe JsonbPath