influxdata / influxdata/influxdb-java
BoundParameterQuery on SELECT and FROM parameters
- Dominant language
- Java
- Stars
- 1.2k
- Forks
- 469
- PR merge metrics
- No merged PRs in 30d
Description
There was an issue in 2019 regarding this problem: https://github.com/influxdata/influxdb-java/issues/615
This issue was closed because binding parameters other than WHERE was not possible according to the documentation at the time. It seems this part of the documentation was changed recently:
https://docs.influxdata.com/influxdb/v1.8/tools/api/#bind-parameters
> The API supports binding parameters to particular field values or tag values. Use the syntax `$` as a placeholder in the query, and URL encode the map of placeholder keys to placeholder values in the request body. This allows all InfluxQL queries where the value is customizable - such as field values, function names, or intervals - to be represented using bind parameters.
Are there any plans to allow binding parameters in SELECT and FROM clauses?
Am I right that there is currently no way to protect SELECT and FROM clauses against injection?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading issue #615 and the linked InfluxDB v1.8 bind-parameters documentation. Determine whether SELECT and FROM placeholders are supported and what client or API behavior is required; done would be a maintainer decision or a scoped implementation plan, since no files or tests are named.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- backend-api-design, databases
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100