SQL injection in Q&A Visual

[EmanuelKakuja]

Hi everyone, 
While doing testing on one of our reports we uncovered that we can actually perform SQL injection via the Q&A visual .
You can even test this by writting 
'or 1=1--
in the Q&A visual of the Power BI sample report offered by Microsoft called "Sales and Returns sample v201912"

Is there a way to stop SQL injections from taking place via the Q&A visual ? 

[amitchandak]

@EmanuelKakuja , Please report an issue - https://community.powerbi.com/t5/Issues/idb-p/Issues

[EmanuelKakuja · Accepted solution]

Hi @amitchandak thank you for the advice ; i created the following issue ; fingers crossed 😄 

SQL injection in Q&A Visual - Microsoft Power BI Community