But the same posibble security issue is already with existing SQLCriterion, so it does not add any more problems into the Criteria API.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira