Add hard-coded taints for ReplaceQueryBuilder similiar to InsertQueryBuilder
Open, Needs TriagePublic
Actions

Assigned To

None

Authored By

	Umherirrender
	Apr 1 2024, 9:41 PM

Description

These functions needs special case in the taint code

to be handled similar to the same-named functions in InsertQueryBuilder (T253380 / 9b35afd537c804f9fc581b5453977846d40739d5)

Mentioned Here: rMTPS9b35afd537c8: Hardcode taintedness of InsertQueryBuilder::row() and ::rows()
T253380: Make taint-check understand all QueryBuilders

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 1 2024, 9:41 PM

Maybe this is not needed as there is no special handling for argument $rows for IDatabase::replace or IDatabase::upsert at the moment.