Forum Discussion
SQL injection in Q&A Visual
Hi everyone,
While doing testing on one of our reports we uncovered that we can actually perform SQL injection via the Q&A visual .
You can even test this by writting
'or 1=1--
in the Q&A visual of the Power BI sample report offered by Microsoft called "Sales and Returns sample v201912"
Is there a way to stop SQL injections from taking place via the Q&A visual ?
Hi amitchandak thank you for the advice ; i created the following issue ; fingers crossed 😄
SQL injection in Q&A Visual - Microsoft Power BI Community
2 Replies
EmanuelKakuja , Please report an issue - https://community.powerbi.com/t5/Issues/idb-p/Issues
Hi amitchandak thank you for the advice ; i created the following issue ; fingers crossed 😄
SQL injection in Q&A Visual - Microsoft Power BI Community
