Flagsmith/flagsmith
在 GitHub 查看Null-terminated query parameters cause server errors in the Core SDK endpoints
Open
#2,901 创建于 2023年10月30日
buggood first issue
仓库指标
- Star
- (3,475 star)
- PR 合并指标
- (平均合并 3天 7小时) (30 天内合并 157 个 PR)
描述
Example Sentry issue: FLAGSMITH-API-3TZ
ValueError: A string literal cannot contain NUL (0x00) characters.
(15 additional frame(s) were not displayed)
...
File "environments/identities/views.py", line 185, in get
.get_or_create(identifier=identifier, environment=request.environment)
This should be a problem for every view that accesses query parameters directly.
A quick search yields 8 occurences of this: https://github.com/search?q=repo%3AFlagsmith%2Fflagsmith+query_params.get&type=code
For each of those we need to assess the performance impact of using a serializer (DRF's CharField handles null chars).