mirror of
https://github.com/snipe/snipe-it.git
synced 2026-08-18 11:15:42 +00:00
One of our automated pen tests was triggering a 500 by passing a URL: /components/2%7C%7C(SELECT%20dbms_pipe.receive_message('ptt','5')%20FROM%20dual)%7C%7C0/checkout
This just makes sure the IDs passed are actual number.