Code Review / aaa.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 4ced048) | patch
Use prepareStatement() in RoleStore.deleteRole() 41/103241/1
authorRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:20:59 +0000 (18:20 +0100)
committerRobert Varga <robert.varga@pantheon.tech>
Wed, 16 Nov 2022 17:22:18 +0000 (18:22 +0100)
commite0ead2109e45d770b48bb3b848d9e75185c98c4c
treee82cf4691388cbc7dc10f9f6803e03fb1fd50efatree | snapshot
parent4ced048742e253565acb0545b281b7b556b1545ecommit | diff
Use prepareStatement() in RoleStore.deleteRole()

The conversion to prepared statements has not dealt with the delete
function, leaving the ability to wipe the entire RoleStore with SQL
injection. Fix this by using a proper prepared statement.

JIRA: AAA-239
Change-Id: If46a900951b4f1769239bd5f38516b299284f88b
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>
aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java diff | blob | history
Authentication, Authorization, Accounting