method

sanitize_limit

v3.0.7 - Show latest stable - 0 notes - Class: ActiveRecord::ConnectionAdapters::DatabaseStatements

1.0.0
1.1.0
1.1.1
1.1.6
1.2.0
1.2.6
2.0.0
2.0.1
2.0.3
2.1.0 (0)
2.2.1 (38)
2.3.2 (0)
2.3.8 (0)
3.0.0 (0)
3.0.5 (10)
3.0.7 (0)
3.0.9 (-2)
3.1.0 (0)
3.2.1 (0)
3.2.3 (0)
3.2.8 (0)
3.2.13 (0)
What's this?

sanitize_limit(limit) public

Sanitizes the given LIMIT parameter in order to prevent SQL injection.

The limit may be anything that can evaluate to a string via #to_s. It should look like an integer, or a comma-delimited list of integers, or an Arel SQL literal.

Returns Integer and Arel::Nodes::SqlLiteral limits as is. Returns the sanitized limit parameter, either as an integer, or as a string which contains a comma-delimited list of integers.

Show source

# File activerecord/lib/active_record/connection_adapters/abstract/database_statements.rb, line 263
      def sanitize_limit(limit)
        if limit.is_a?(Integer) || limit.is_a?(Arel::Nodes::SqlLiteral)
          limit
        elsif limit.to_s =~ /,/
          Arel.sql limit.to_s.split(',').map{ |i| Integer(i) }.join(',')
        else
          Integer(limit)
        end
      end

sanitize_limit

Related methods

Flowdock - Team Inbox With Chat for Software Developers