B12974, Added validation for SQL parameters in FE requiring {{ }} enclosure (!794) · Merge requests · typo3 / qfq · GitLab

Zen Zalapski requested to merge B12974-Sanitize-Queries-in-Action-Elements into develop Dec 20, 2024

Added validation to ensure 5 SQL parameters (sqlBefore, sqlInsert, sqlUpdate, sqlDelete, sqlAfter) in FE are enclosed by {{ }}.
New helper method isEnclosedWithBraces.
New method validateFeActions to check for proper enclosure and throw an exception if validation fails.