prevent SQL injection by parameterization
Open
- Dominant language
- Java
- Stars
- 6.4k
- Forks
- 1.2k
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 115
Description
**Is your feature request related to a problem? Please describe.**
使用SQL查询、删除、插入时 使用 序列化的参数进行 传递， 避免SQL注入导致安全问题。
**Additional context**
https://github.com/eedalong/Apache-IoTDB-Client-CSharp/pull/76#discussion_r918936817
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by locating the Java paths that build SQL for queries, deletes, and inserts, then review the linked discussion for scope. Done should mean those operations use serialized parameters and have coverage demonstrating that injection is prevented.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, sql
- Domain
- databases, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100