Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 7042c72) | patch
Use prepareStatement() in RoleStore.deleteRole() 70/103270/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:20:59 +0000 (18:20 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:52:31 +0000 (18:52 +0100)
commit65eefe6b82eecb64efb6c8e2cc0eb2ac2f518b6e
tree9eb2c25ea75b24ea69ced918fdc8e51a40b8b882tree | snapshot
parent7042c7252ecb73ff77fef6ae0da35e224c9ea1d1commit | diff
Use prepareStatement() in RoleStore.deleteRole()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire RoleStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-239
Change-Id: If46a900951b4f1769239bd5f38516b299284f88b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit e0ead2109e45d770b48bb3b848d9e75185c98c4c)
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java diff | blob | history
Authentication, Authorization, Accounting