S0RIEN/DataGridBundle — Issue #73: Prevent SQL injections
Author: lstrojny
Created: 2012-01-21 21:26:10+00:00
State: open

Currently column objects are responsible for escaping and quoting values which does not work. I would suggest the following design change.

- Change Columns `getValue()` method to alway return it’s raw values and do no quoting our escaping
- Let columns hint if a value is meant to be strictly or partially matched against a source (`=` or `LIKE` in SQL)
- Make Sources responsible to do the right thing with values

Comments?