Re: [I] [Improvement][Parameter passing] SQL component passing parameters cannot be directly passed into the entire SQL statement [dolphinscheduler]

Mon, 02 Dec 2024 17:50:14 -0800 


dzygoon commented on issue #16864:
URL: 
https://github.com/apache/dolphinscheduler/issues/16864#issuecomment-2513362121

   我查看了源码，主要是因为使用了PreparedStatement进行了SQL内容替换。
   
![image](https://github.com/user-attachments/assets/0a47f328-e966-49bc-ada6-a8f835b1f32c)
   
我猜测当时这么使用的目的是为了防止任意SQL的执行，以及注入等问题，但考虑到SQL任务组件是控制在调度平台的，不像应用接口那样，所以是不是可以调整以下呢？我正在尝试直接执行替换后的SQL，不再使用PreparedStatement预处理占位符。
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to