diff options
author | Sean Griffin <sean@seantheprogrammer.com> | 2015-12-14 08:18:05 -0700 |
---|---|---|
committer | Sean Griffin <sean@seantheprogrammer.com> | 2015-12-14 08:19:47 -0700 |
commit | 4358b0d1f89f5258eec545b2b2d742a12e3eb5bc (patch) | |
tree | 18012b1ebd8a7402aff69a3b34ce720bc1dd7f7d /activerecord/test | |
parent | 9a17ce8878d847faf39f3acd329166612fa75042 (diff) | |
download | rails-4358b0d1f89f5258eec545b2b2d742a12e3eb5bc.tar.gz rails-4358b0d1f89f5258eec545b2b2d742a12e3eb5bc.tar.bz2 rails-4358b0d1f89f5258eec545b2b2d742a12e3eb5bc.zip |
Deprecate limit strings with commas
Some backends allow `LIMIT 1,2` as a shorthand for `LIMIT 1 OFFSET 2`.
Supporting this in Active Record massively complicates using bind
parameters for limit and offset, and it's trivially easy to build an
invalid SQL query by also calling `offset` on the same `Relation`.
This is a niche syntax that is only supported by a few adapters, and can
be trivially worked around by calling offset explicitly.
Diffstat (limited to 'activerecord/test')
-rw-r--r-- | activerecord/test/cases/base_test.rb | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/activerecord/test/cases/base_test.rb b/activerecord/test/cases/base_test.rb index 3a9d60a79f..b449280fb4 100644 --- a/activerecord/test/cases/base_test.rb +++ b/activerecord/test/cases/base_test.rb @@ -112,7 +112,9 @@ class BasicsTest < ActiveRecord::TestCase unless current_adapter?(:PostgreSQLAdapter, :OracleAdapter, :SQLServerAdapter, :FbAdapter) def test_limit_with_comma - assert Topic.limit("1,2").to_a + assert_deprecated do + assert Topic.limit("1,2").to_a + end end end @@ -138,8 +140,10 @@ class BasicsTest < ActiveRecord::TestCase end def test_limit_should_sanitize_sql_injection_for_limit_with_commas - assert_raises(ArgumentError) do - Topic.limit("1, 7 procedure help()").to_a + assert_deprecated do + assert_raises(ArgumentError) do + Topic.limit("1, 7 procedure help()").to_a + end end end |