colymba/silverstripe-restfulapi

Correctly parse $queryParams

Opened this issue · 0 comments

pedro2555 commented

$queryParams should be parsed and validated before executing against database.

On GET request for filtered data if one modifier value is empty server responds with the full result set.

api/model?Title__StartsWith=

For more robustness this should result in a 400 Bad Request.

Similarly,

api/model/?URL__StartsWith=

Results in a 500 Internal Server Error.