[reload4j] SQL injection problem in JDBCAppender

Vladimir Sitnikov sitnikov.vladimir at gmail.com
Wed Jan 19 13:45:42 CET 2022


Let me file a PR with what I mean.
I think we can support many of the current usages in a drop-in replacement
fashion,
while advising them to migrate to more robust approaches.

>It would be probably be easier and more sane to write a new
>JDBCAppender from the ground up.

A new JDBCAppender makes sense indeed.
That, however, is another story.

Vladimir
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.qos.ch/pipermail/reload4j/attachments/20220119/74ea4100/attachment.html>


More information about the reload4j mailing list