Skip to content

Commit 7e89890

Browse files
Copilotjason810496
andcommitted
Add queue name validation to read_archive methods for SQL injection prevention
Co-authored-by: jason810496 <[email protected]>
1 parent 250472e commit 7e89890

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

pgmq_sqlalchemy/queue.py

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1511,6 +1511,8 @@ def read_archive(self, queue_name: str) -> Optional[Message]:
15111511
print(archived_msg.message)
15121512
15131513
"""
1514+
# Validate queue name first to prevent SQL injection
1515+
self.validate_queue_name(queue_name)
15141516
if self.is_async:
15151517
return self.loop.run_until_complete(self._read_archive_async(queue_name))
15161518
return self._read_archive_sync(queue_name)
@@ -1591,6 +1593,8 @@ def read_archive_batch(
15911593
print(msg.message)
15921594
15931595
"""
1596+
# Validate queue name first to prevent SQL injection
1597+
self.validate_queue_name(queue_name)
15941598
if self.is_async:
15951599
return self.loop.run_until_complete(
15961600
self._read_archive_batch_async(queue_name, batch_size)

0 commit comments

Comments
 (0)