add safety comment on the SQL op

lodosgroup · Jan 9, 2024 · 85cb71f · 85cb71f
1 parent 9ef736c
commit 85cb71f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/package-search-api.go b/package-search-api.go
@@ -138,6 +138,7 @@ func queryEndpoint(w http.ResponseWriter, r *http.Request) {
 			return
 		}
 
+		// SAFETY: pkg_search param is validated through a regex pattern in validateSearchValue function. 
 		query := fmt.Sprintf(`
                SELECT
                name, v_readable as version, description, arch, kind, tags, installed_size as "installed size", maintainer, license, source_repository as "repository", mandatory_dependencies as "dependencies"