Description
There are many places in DatabaseMetaDataImpl that construct a dynamic query. It is wrong because leads to a security issue.
- All queries should use
PreparedStatement
- Where is it no possible - should be reviewed and needed escaping should be added