SQL Injection

GSF is vulnerable to SQL Injection attacks. It does not set the allowSelect argument of ParseInputMeasurementKeys function to null and does not remove the mrequestedInputFilter setting before callingbase.Initialize. This can allow a malicious user to inject and execute arbitrary SQL queries...