[jbosscache-issues] [JBoss JIRA] Commented: (JBCACHE-1461) Possible problems with SQL metacharacters in JDBCCacheLoader

Possible problems with SQL metacharacters in JDBCCacheLoader ------------------------------------------------------------ Key: JBCACHE-1461 URL: https://jira.jboss.org/jira/browse/JBCACHE-1461 Project: JBoss Cache Issue Type: Bug Security Level: Public(Everyone can see) Components: Cache loaders Affects Versions: 2.2.1.CR1, 3.0.2.CR1 Reporter: Krzysztof Sobolewski Assignee: Manik Surtani Fix For: 3.1.0.GA JDBCCacheLoader uses queries with LIKE operator, but passes search patterns constructed from query parameters without concern for metacharacters like '%' and '_'. A quick test can show the problem: add /a/b/c add /a/d/c remove /a/_/c find the cache is empty. Fortunately the problem is apparently limited to deleteNodeSql and recursiveChildrenSql, both in JDBCCacheLoaderConfig (and not in AdjListJDBCCacheLoaderConfig).