mirror of
https://github.com/frappe/erpnext.git
synced 2026-02-12 17:23:38 +00:00
Updated Code Security Guidelines (markdown)
@@ -144,7 +144,7 @@ Example:
|
||||
|
||||
## Check parameter types
|
||||
|
||||
Always check if the parameters passed to your whitelisted method have the type you expect. For example, if you accept a filter value for a specific company, like `"Example Corp"` users could instead pass a different filter object like `["is", "set"]`, thus changing the behavior of your code.
|
||||
Always check if the parameters passed to your whitelisted method have the type you expect. For example, if you accept a filter value for a specific company, like `"Example Corp"` a malicious user could instead pass a different filter object like `["is", "set"]`, thus changing the behavior of your code.
|
||||
|
||||
In v15+, type annotations will be checked automatically, you just need to provide them:
|
||||
|
||||
|
||||
Reference in New Issue
Block a user