feat: validate query conditions (#10595)

Query conditions can take in arbitrary values, this can cause SQL errors. This PR fixes it
2024-12-17 17:16:37 +05:30
parent e3109dbb22
commit b34dac7bbe
14 changed files with 119 additions and 1 deletions
--- a/app/services/contacts/filter_service.rb
+++ b/app/services/contacts/filter_service.rb
@@ -9,6 +9,7 @@ class Contacts::FilterService < FilterService
  end

  def perform
+    validate_query_operator
    @contacts = query_builder(@filters['contacts'])

    {