[Improvement] Possible SQL injection in MysqlDatabaseOperations.java and JdbcDatabaseOperations.java
Open
good first issue
improvement
- Dominant language
- Java
- Stars
- 3.2k
- Forks
- 935
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 315
Description
### What would you like to be improved?
The database name should be validated before but used to construct an SQL to show tables. (Search for "SHOW TABLES IN".) Note that the SQL strings are also built in different ways in each file and probably should be built the same way.
### How should we improve?
Validate the name or use query parameters.
Contributor guide
Assessment
This issue has not been assessed yet.