Skip to content

[JDBC-V2] Make DatabaseMetaDataImpl use PreparedStatement. #2739

@chernser

Description

@chernser

Description

There are many places in DatabaseMetaDataImpl that construct a dynamic query. It is wrong because leads to a security issue.

  • All queries should use PreparedStatement
  • Where is it no possible - should be reviewed and needed escaping should be added

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:jdbc-metadataissue handling metadata things like getting type of columnjdbc-v2jdbc-v2 issues

    Type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions