Skip to content

Commit e3ec68b

Browse files
committed
Wrap SpEL documentation with admonition.
Closes #4085
1 parent f93d7e7 commit e3ec68b

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/main/asciidoc/reference/mongo-repositories.adoc

+2-2
Original file line numberDiff line numberDiff line change
@@ -548,9 +548,9 @@ public interface PersonRepository extends MongoRepository<Person, String> {
548548
}
549549
----
550550

551-
SpEL in query strings can be a powerful way to enhance queries.
551+
WARNING: SpEL in query strings can be a powerful way to enhance queries.
552552
However, they can also accept a broad range of unwanted arguments.
553-
You should make sure to sanitize strings before passing them to the query to avoid unwanted changes to your query.
553+
Make sure to sanitize strings before passing them to the query to avoid creation of vulnerabilities or unwanted changes to your query.
554554

555555
Expression support is extensible through the Query SPI: `org.springframework.data.repository.query.spi.EvaluationContextExtension`.
556556
The Query SPI can contribute properties and functions and can customize the root object.

0 commit comments

Comments
 (0)