Skip to content

Commit d2b1069

Browse files
committed
By default the RestrictOrderByToPropertyOrField is now set to true in the ParsingConfig
1 parent bd4b8c7 commit d2b1069

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,7 @@ Or provide a list of addtional types in the [DefaultDynamicLinqCustomTypeProvide
5353
A breaking change is introduced in this version to solve CVE-2024-51417.
5454
It's not allowed anymore to call any methods on the `object` type. By default also the `ToString` and `Equals` methods are not allowed.
5555
To allow these methods set `AllowEqualsAndToStringMethodsOnObject` to `true` in the `ParsingConfig` and provide that config to all dynamic calls.
56+
Which means that only properties and fields can be used in the `OrderBy` / `ThenBy` clause.
5657

5758
---
5859

0 commit comments

Comments
 (0)