[JDBC-V2] Make `DatabaseMetaDataImpl` use `PreparedStatement`.

Aperta

#2,739 aperta il 9/2/2026 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

area:jdbc-metadata jdbc-v2

Descrizione

## Description

There are many places in `DatabaseMetaDataImpl` that construct a dynamic query. It is wrong because leads to a security issue.

- All queries should use `PreparedStatement`
- Where is it no possible - should be reviewed and needed escaping should be added

Questa issue non è ancora stata valutata.