Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: e0ead21) | patch
Use prepareStatement() in DomainStore.deleteDomain() 42/103242/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:24:46 +0000 (18:24 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:25:22 +0000 (18:25 +0100)
commit11295189db80dd45fb0c460d9e9cb3598ed7f229
treee7de673320a7a549a47f4196fad7b83851522fb8tree | snapshot
parente0ead2109e45d770b48bb3b848d9e75185c98c4ccommit | diff
Use prepareStatement() in DomainStore.deleteDomain()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire DomainStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-240
Change-Id: I4650e4561482864c90df737e964dcc5514221a15
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java diff | blob | history
Authentication, Authorization, Accounting