memgraph

History

Tonko Sabolcec 59bc9d8989 Fix label/edge/property name escaping in `DUMP DATABASE` Summary: This diff fixes the issue for label name (and edge type/property) with spaces and special characters to avoid possible OpenCypher injections. Consider an example where label name is 'hello :world'. `DUMP DATABASE` used to return query which creates a node (u:hello :world) - i.e. node that contains two labels 'hello' and 'world'. This fix escapes names to create the following node with exactly one label as expected: ``` (u:`hello :world`) ``` Reviewers: mferencevic Reviewed By: mferencevic Subscribers: pullbot Differential Revision: https://phabricator.memgraph.io/D2774	2020-05-21 14:46:51 +02:00
..
tests	Fix label/edge/property name escaping in `DUMP DATABASE`	2020-05-21 14:46:51 +02:00
runner.py	Implement durability functionality for unique constraints	2020-03-06 14:14:54 +01:00

Tonko Sabolcec 59bc9d8989 Fix label/edge/property name escaping in DUMP DATABASE

Summary:
This diff fixes the issue for label name (and edge type/property)
with spaces and special characters to avoid possible OpenCypher injections.
Consider an example where label name is 'hello :world'. `DUMP DATABASE`
used to return query which creates a node (u:hello :world) - i.e. node
that contains two labels 'hello' and 'world'. This fix escapes names to
create the following node with exactly one label as expected:
```
(u:`hello :world`)
```

Reviewers: mferencevic

Reviewed By: mferencevic

Subscribers: pullbot

Differential Revision: https://phabricator.memgraph.io/D2774

2020-05-21 14:46:51 +02:00

tests Fix label/edge/property name escaping in DUMP DATABASE 2020-05-21 14:46:51 +02:00

runner.py Implement durability functionality for unique constraints 2020-03-06 14:14:54 +01:00