Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 65eefe6) | patch
Use prepareStatement() in DomainStore.deleteDomain() 71/103271/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:24:46 +0000 (18:24 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:53:17 +0000 (18:53 +0100)
commit3ccc1cadc6b40abedc8a65226eefa09c080a9b23
tree1a749411c3ba03c60b22b165e3ba042619a39bfatree | snapshot
parent65eefe6b82eecb64efb6c8e2cc0eb2ac2f518b6ecommit | diff
Use prepareStatement() in DomainStore.deleteDomain()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire DomainStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-240
Change-Id: I4650e4561482864c90df737e964dcc5514221a15
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 11295189db80dd45fb0c460d9e9cb3598ed7f229)
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java diff | blob | history
Authentication, Authorization, Accounting