influxdata / influxdata/influxdb-java

BoundParameterQuery on SELECT and FROM parameters

Open
#782 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
1.2k
Forks
469
PR merge metrics
No merged PRs in 30d

Description

There was an issue in 2019 regarding this problem: https://github.com/influxdata/influxdb-java/issues/615
This issue was closed because binding parameters other than WHERE was not possible according to the documentation at the time. It seems this part of the documentation was changed recently:
https://docs.influxdata.com/influxdb/v1.8/tools/api/#bind-parameters

> The API supports binding parameters to particular field values or tag values. Use the syntax `$` as a placeholder in the query, and URL encode the map of placeholder keys to placeholder values in the request body. This allows all InfluxQL queries where the value is customizable - such as field values, function names, or intervals - to be represented using bind parameters.

Are there any plans to allow binding parameters in SELECT and FROM clauses?
Am I right that there is currently no way to protect SELECT and FROM clauses against injection?

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading issue #615 and the linked InfluxDB v1.8 bind-parameters documentation. Determine whether SELECT and FROM placeholders are supported and what client or API behavior is required; done would be a maintainer decision or a scoped implementation plan, since no files or tests are named.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
backend-api-design, databases
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.