You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
MAINTENANCENOTIFICATIONID, CATEGORY, SENTIMENT, LOCATION, DISTANCE_METER, LONG, LAT, LONG_LAT_GEO, "similarity" FROM "GEO_COORD"
WHERE "DISTANCE_METER" < ${distance}
ORDER BY "similarity", "DISTANCE_METER" ASC;`
Taking into account the documentation here and the specific below paragraph, the provided code in the examples seem to be dangerous as unsanitized user input is used directly to concatenate a SQL string without using proper cds.ql.
Please verify if this is correct interpretation of the security of the provided samples and whether this should be corrected throughout the samples.
The text was updated successfully, but these errors were encountered:
Referring to code samples like here:
btp-generative-ai-hub-use-cases/02-embedding-business-context-vector-engine/cap-app/api/srv/rag-service.ts
Lines 63 to 80 in f11b16b
Taking into account the documentation here and the specific below paragraph, the provided code in the examples seem to be dangerous as unsanitized user input is used directly to concatenate a SQL string without using proper cds.ql.
Please verify if this is correct interpretation of the security of the provided samples and whether this should be corrected throughout the samples.
The text was updated successfully, but these errors were encountered: