9 commits

Author	SHA1	Message	Date
Laurent Dami	13e2b63d26	#99748 catch runtime errors occurring when user input for the MATCH operator is not a proper regex	2014-11-25 04:30:57 +01:00
Laurent Dami	28fc0e459e	RT#99748: replacing interpolated variables by a closure -- no risk of code injection	2014-10-29 06:57:17 +02:00
Kenichi Ishigaki	9b227e74f4	fixed a case where bind param is undef (which should be converted to NULL)	2014-10-28 16:13:46 +09:00
Kenichi Ishigaki	0cd3997830	use quotemeta (as adviced in RT-99748) to address serious security issues	2014-10-28 15:12:29 +09:00
Laurent Dami	c6d9c27e22	RT#99748 ... - added support for undef (NULLs) in comparisons - new test file t/virtual_table/rt_99748.t for testing nulls and comparing vtable with a regular table - tests that no security holes can be inserted in compiled regexes - ROWIDs start at 1, not at 0 - replaced qr{..} by m{..}	2014-10-25 21:06:16 +02:00
Kenichi Ishigaki	590d084b3d	not to depend on YAML::XS/List::MoreUtils	2014-07-21 09:02:08 +09:00
Laurent Dami	bf65db231f	various fixes / improvements	2014-07-12 08:20:19 +02:00
Laurent Dami	9018a4683c	various code refactorings, completion of the doc	2014-07-11 06:06:19 +02:00
Laurent Dami	d6a77c88ea	bug corrections & addition of class VirtualTable/PerlData	2014-07-10 05:45:28 +02:00