From f96e9e3d41ba011c153e000b2a5f2d30270fee86 Mon Sep 17 00:00:00 2001
From: Luca Frosini <luca.frosini@isti.cnr.it>
Date: Fri, 4 Oct 2019 14:42:44 +0200
Subject: [PATCH] Fixed allow list for query parameter in list method

---
 .../java/org/gcube/gcat/persistence/ckan/CKANPackage.java  | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/main/java/org/gcube/gcat/persistence/ckan/CKANPackage.java b/src/main/java/org/gcube/gcat/persistence/ckan/CKANPackage.java
index adf1cf5..33223e4 100644
--- a/src/main/java/org/gcube/gcat/persistence/ckan/CKANPackage.java
+++ b/src/main/java/org/gcube/gcat/persistence/ckan/CKANPackage.java
@@ -297,8 +297,9 @@ public class CKANPackage extends CKAN {
 		}
 	}
 	
-	protected static String[] allowedFilters = new String[] {"q", "fq", "fq_list", "sort", "facet", "facet.mincount",
-			"facet.limit", "facet.field", "include_drafts", "include_private", "ext_bbox", "fl"};
+	protected static String[] allowedListQueryParameters = new String[] {"q", "fq", "fq_list", "sort", 
+			 /* "facet", "facet.mincount", "facet.limit", "facet.field", */
+			"include_drafts", "include_private", "ext_bbox"};
 	
 	protected Map<String,String> checkListParameters(MultivaluedMap<String,String> queryParameters,
 			Map<String,String> parameters) {
@@ -335,7 +336,7 @@ public class CKANPackage extends CKAN {
 			// q=organization:nextnext
 		}
 		
-		for(String key : allowedFilters) {
+		for(String key : allowedListQueryParameters) {
 			if(queryParameters.containsKey(key)) {
 				parameters.put(key, queryParameters.getFirst(key));
 			}