mindol1004/spring-data-mongodb
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Wrap SpEL documentation with admonition.

Browse Source 
Closes #4085
This commit is contained in:
Mark Paluch
2022-06-14 09:11:46 +02:00
parent 8f9576aa42
commit d4cce9ac00
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/main/asciidoc/reference/mongo-repositories.adoc
View File

@@ -548,9 +548,9 @@ public interface PersonRepository extends MongoRepository<Person, String> {
}
----
SpEL in query strings can be a powerful way to enhance queries.
WARNING: SpEL in query strings can be a powerful way to enhance queries.
However, they can also accept a broad range of unwanted arguments.
You should make sure to sanitize strings before passing them to the query to avoid unwanted changes to your query.
Make sure to sanitize strings before passing them to the query to avoid creation of vulnerabilities or unwanted changes to your query.
Expression support is extensible through the Query SPI: `org.springframework.data.repository.query.spi.EvaluationContextExtension`.
The Query SPI can contribute properties and functions and can customize the root object.