[hibernate-issues] [Hibernate-JIRA] (HHH-3811) Bug: No ability to escape SQL keywords in HQL queries.

Ondra Žižka (JIRA) noreply at atlassian.com
Thu Jan 31 01:27:53 EST 2013

Previous message: [hibernate-issues] [Hibernate-JIRA] (HHH-6672) Inserting UNION a HQL and JP-QL query string truncates the query. This makes exploiting HQL Injections easier. Security issue.
Next message: [hibernate-issues] [Hibernate-JIRA] (HHH-7961) Allow keywords in INSERT's attribute_list, or provide a way to escape them.
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/hibernate-issues/attachments/20130131/044a05f7/attachment-0001.html

Previous message: [hibernate-issues] [Hibernate-JIRA] (HHH-6672) Inserting UNION a HQL and JP-QL query string truncates the query. This makes exploiting HQL Injections easier. Security issue.
Next message: [hibernate-issues] [Hibernate-JIRA] (HHH-7961) Allow keywords in INSERT's attribute_list, or provide a way to escape them.
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the hibernate-issues mailing list