Skip to content

Commit d4cce9a

Browse files
committed
Wrap SpEL documentation with admonition.
Closes #4085
1 parent 8f9576a commit d4cce9a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/main/asciidoc/reference/mongo-repositories.adoc

+2-2
Original file line numberDiff line numberDiff line change
@@ -548,9 +548,9 @@ public interface PersonRepository extends MongoRepository<Person, String> {
548548
}
549549
----
550550

551-
SpEL in query strings can be a powerful way to enhance queries.
551+
WARNING: SpEL in query strings can be a powerful way to enhance queries.
552552
However, they can also accept a broad range of unwanted arguments.
553-
You should make sure to sanitize strings before passing them to the query to avoid unwanted changes to your query.
553+
Make sure to sanitize strings before passing them to the query to avoid creation of vulnerabilities or unwanted changes to your query.
554554

555555
Expression support is extensible through the Query SPI: `org.springframework.data.repository.query.spi.EvaluationContextExtension`.
556556
The Query SPI can contribute properties and functions and can customize the root object.

0 commit comments

Comments
 (0)