commit 0553fb5703a0020e76bf5eef7dede50b3679ac82
author Nan Zhou <nanzhoumails@gmail.com> Fri Aug 05 17:23:06 2022 +0000
committer Ed Tanous <ed@tanous.net> Wed Aug 10 15:46:53 2022 +0000
tree f794cf9bb59cd2f4880442f69ee9d9507333276e
parent 0ea42c4abad60b3d705a48aa9e0e130c3f29c11b

query: set only to true

Only parameter is considered safe, and is not behind the flag in the
query handler codes. This change sets |OnlyMemberQuery| to true all the
time.

Tested:
1. unit test passed

Signed-off-by: Nan Zhou <nanzhoumails@gmail.com>
Change-Id: I967912ec6c3103531b4c6556710a2b8924e3ac4f

redfish-core/lib/service_root.hpp

diff --git a/redfish-core/lib/service_root.hpp b/redfish-core/lib/service_root.hpp
index 3b533d4..8d686c5 100644
--- a/redfish-core/lib/service_root.hpp
+++ b/redfish-core/lib/service_root.hpp
@@ -94,7 +94,7 @@
     protocolFeatures["ExpandQuery"]["NoLinks"] =
         bmcwebInsecureEnableQueryParams;
     protocolFeatures["FilterQuery"] = false;
-    protocolFeatures["OnlyMemberQuery"] = bmcwebInsecureEnableQueryParams;
+    protocolFeatures["OnlyMemberQuery"] = true;
     protocolFeatures["SelectQuery"] = bmcwebInsecureEnableQueryParams;
     protocolFeatures["DeepOperations"]["DeepPOST"] = false;
     protocolFeatures["DeepOperations"]["DeepPATCH"] = false;

redfish-core/lib/ut/service_root_test.cpp

diff --git a/redfish-core/lib/ut/service_root_test.cpp b/redfish-core/lib/ut/service_root_test.cpp
index 6d9c677..db8ba10 100644
--- a/redfish-core/lib/ut/service_root_test.cpp
+++ b/redfish-core/lib/ut/service_root_test.cpp
@@ -99,8 +99,7 @@
         EXPECT_EQ(json["ProtocolFeaturesSupported"]["ExpandQuery"].size(), 4);
     }
     EXPECT_FALSE(json["ProtocolFeaturesSupported"]["FilterQuery"]);
-    EXPECT_EQ(json["ProtocolFeaturesSupported"]["OnlyMemberQuery"],
-              bmcwebInsecureEnableQueryParams);
+    EXPECT_TRUE(json["ProtocolFeaturesSupported"]["OnlyMemberQuery"]);
     EXPECT_EQ(json["ProtocolFeaturesSupported"]["SelectQuery"],
               bmcwebInsecureEnableQueryParams);
     EXPECT_FALSE(