Disallow groovy script in SQL statements to prevent possible exploitation.
Open
- Dominant language
- Java
- Stars
- 6.1k
- Forks
- 1.5k
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 195
Description
We would like to disable the ability to run groovy scripts in SQL statements with an option to enable groovy scripts by setting a configuration variable.
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by locating SQL statement handling and the configuration system that governs optional features, then trace how Groovy scripts are executed. Done means Groovy execution is disabled by default, can be explicitly enabled through configuration, and the behavior is covered by tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- groovy, java, sql
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100