[ST-256] SQL Injection : Block use of OR condition as input with quote - Workterra Jira

Order by Priority

ST-256SQL Injection : Block use of OR condition as input with quote
ST-134Eldorado - El Dorado
ST-294Ability to have a form pend on change of additional form values
ST-316For dependent coverage, if there are no eligible dependent then the plan should not show.
ST-318Ability to align OE by benefit type / plan
ST-317Ability to review current & previous rates in employee enrollment report
ST-320Ability to map multiple health tier labels to one rate
ST-319Need to have an event date and termination date rule for qualifying events
ST-321Ability to create plan design health tier by plan
ST-313Active COBRA plans set-up methodology (i.e an active employee but needs to enroll in COBRA plans)
ST-293WT -> Health Age Banded Rate -> When Child age changed and he went to the different age band - system did not changed his cost automatically
ST-371Rates - Allow employees to make a pre/post tax deduction decision on plans.
ST-226Query Performance - Eligibility Query
ST-175Query Optimization for performance
ST-178Query Performance - OES_SP_Get_EnrollmentModesForEmployee
ST-225Query Performance - OES_SP_Get_FormBuilderAttributeFields
ST-184Query performance - UpdateEventBuilderRuleEngineFromCriteria
ST-168ST-88: Suggestion: Default password should be randomized
ST-142Screen Level Changes and Business logic For Class wise OE
ST-154POC of new cloud environment
ST-153Database Archival: Data cut off for last 2 years
ST-152Database Profiling for Query Optimization
ST-151Code Profiling of Existing Code Base
ST-150Remove code patterns that contribute to GC overhead
ST-148Change the order of loading widgets & page background for Dashboard
ST-336Terminate Plan Election (Workterra Utility Changes)
ST-295Ability to default by client level and not have it on the employee demographics screens within SA
ST-366Password Resets - Auto-process to regenerate password for rehires
ST-308System Generated ID generation
ST-382 Setting to auto move Emplopyee's to Inactive status after Term period expires
ST-372Email Notification - Customize broadcast email
ST-141Screen Level and Business Logic Changes For EffectvieDateTerminationDateRules
ST-398Analysis - If a life amount is reduced, the employee screen for that enrollment should show the original amount as well as the reduced amount
ST-126Code Analysis Fixes
ST-344SA Utility : Review and Changes
ST-396Analysis of Plan wise - Fiscal year
ST-395Analysis of For dependent coverage, if there are no eligible dependent then the plan should not show.
ST-345Benefit Type Clonning
ST-276SA Utility and WT Utility Betterment -Enrollment Rollover
ST-325Ability to show the pending elections (either the # of pending elections or the elections themselves) from the employee's record rather than only in the pending queue.
ST-327Ability to add an event that pends even when being done by the Employer
ST-328For the offered amount tab, we need the ability to put date spans
ST-330Need to add Fiscal Year logic and additional eligibility criteria if age banded rates
ST-329Remove requirement of putting an end date on the rates / health tier mappings
ST-16Decrease the number of plans / spouse eligibility
ST-323Add a rule for age at time of election for new hire or start of fiscal / plan year if not NH
ST-324If a life amount is reduced, the employee screen for that enrollment should show the original amount as well as the reduced amount
ST-131Ben Admin - Audit / Correction Utility - Analysis & Mockup creation
ST-305Moving employee to incomplete until they "finish" the enrollment tunnel
ST-5Need a better to see what settings are across plans, rates, qualifying events, etc

Refresh results

1 2 3 Next >>

Details

Type: Enhancement
Status: Closed
Priority: Critical
Resolution: Unresolved
Component/s: None
Labels:
None

Module:
BenAdmin - Security
Reported by:
Harbinger
Item State:
Development - Ready for Local Testing
Issue Importance:
Must Have

Description

When we add input on notes category like asdf' or '1'='1 , category is getting added successfully.

We should block use of OR with '. it should show sql injection character message.

Attachments

Activity

No work has yet been logged on this issue.

People

Assignee:: Unassigned

Reporter:: Vijayendra Shinde (Inactive)

Developer:: Vijayendra Shinde (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 01/Aug/16 07:00 AM

Updated:: 22/Aug/16 06:54 AM

Project Simple

Open issues

SQL Injection : Block use of OR condition as input with quote