Comment 7 for bug 1400366

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to glance (master)

Reviewed: https://review.openstack.org/139996
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=f9820a25d38584fdcc9ffde44de6ec146b6de4fb
Submitter: Jenkins
Branch: master

commit f9820a25d38584fdcc9ffde44de6ec146b6de4fb
Author: Mike Fedosin <email address hidden>
Date: Mon Dec 8 16:22:05 2014 +0300

    Add sort key validation in v2 api

    Since v2 api has no sort key validation and the default
    pagination check is used it's possible to request something
    like /images?sort_key=_sa_class_manager, which causes an
    inner SQL exception with 500 response code from the server.

    This code validates input sort key and raises an exception
    if the parameter is out of the supported keys list.

    Closes-bug: 1400366

    Change-Id: I0cf58ad198375a2f6f58bd7820cbb9d86003247a