|
|
|
|
|
|
by zbentley
3 days ago
|
|
|
If you mean “would it allow arbitrary queries in the admin interface?”, then yes, it would. That’s why it’s the admin interface. If you mean “would it allow arbitrary queries from normal view code”, then no it would not—not unless you string eval on the backend or something else dangerous. |
|
|