Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 83251ac) | patch
Use prepareStatement() in DomainStore.deleteDomain() 47/103247/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:24:46 +0000 (18:24 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:42:54 +0000 (18:42 +0100)
commitaa3596eae57d4a0c993305077938255055c9efca
tree7ca2047972a9a1f5fa1ccfab39b50658c5a93966tree | snapshot
parent83251ac55b8e0d614e7306ad4c1bd0982f657cb3commit | diff
Use prepareStatement() in DomainStore.deleteDomain()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire DomainStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-240
Change-Id: I4650e4561482864c90df737e964dcc5514221a15
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
(cherry picked from commit 11295189db80dd45fb0c460d9e9cb3598ed7f229)
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java diff | blob | history
Authentication, Authorization, Accounting