CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: barry@svr1.postgresql.org 03/07/22 02:13:05
Modified files:
src/interfaces/jdbc/org/postgresql: Tag: REL7_3_STABLE
Driver.java.in
src/interfaces/jdbc/org/postgresql/jdbc1: Tag: REL7_3_STABLE
AbstractJdbc1Statement.java
Log message:
Fix to prevent SQL injection attacks when calling setObject(int,Object,int)
where the Object is a String and the type is numeric (i.e. INTEGER,LONG,etc).
The fix applies the standard escaping for these values.
Modified Files:
Tag: REL7_3_STABLE
jdbc/org/postgresql/Driver.java.in
jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java