[Bugs] #3663 Wikipedia UNSP: Insecure

[Sugar Labs Bugs]

#3663: Insecure
------------------------------------------+---------------------------------
    Reporter:  dsd                        |          Owner:  godiard                    
        Type:  defect                     |         Status:  new                        
    Priority:  Unspecified by Maintainer  |      Milestone:  Unspecified by Release Team
   Component:  Wikipedia                  |        Version:  Unspecified                
    Severity:  Minor                      |       Keywords:                             
Distribution:  Unspecified                |   Status_field:  Unconfirmed                
------------------------------------------+---------------------------------
 wikiserver commit 6ea1a1c78131 adds some custom string handling. This
 probably works in the " case but isn't great.

 You should properly escape the string passed to the query. See the "#
 Never do this -- insecure!" example at
 http://docs.python.org/library/sqlite3.html

-- 
Ticket URL: <http://bugs.sugarlabs.org/ticket/3663>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system