Skip to content

fix:codeql scan Security issue - #7

Open
msslulu wants to merge 32 commits into
developfrom
fix-codeql-scanning
Open

fix:codeql scan Security issue#7
msslulu wants to merge 32 commits into
developfrom
fix-codeql-scanning

Conversation

@msslulu

@msslulu msslulu commented Sep 3, 2026

Copy link
Copy Markdown
Owner

English | 简体中文

PR

PR Checklist

Please check if your PR fulfills the following requirements:

  • The commit message follows our Commit Message Guidelines
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)
  • Built its own designer, fully self-validated

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • CI related changes
  • Documentation content changes
  • Other... Please describe:

Background and solution

What is the current behavior?

Issue Number: N/A

What is the new behavior?

Does this PR introduce a breaking change?

  • Yes
  • No

Other information

// Execute ALTER TABLE statements
for (String alterStatement : alterStatements) {
String sql = String.format("ALTER TABLE %s %s", tableName, alterStatement);
jdbcTemplate.execute(sql);

HttpRequest.Builder requestBuilder =
HttpRequest.newBuilder()
.uri(requestUri)
final int safePageSize = requirePositiveInt(pageSize, "pageSize");
params.put("offset", (safePageNum - 1) * safePageSize);
params.put("limit", safePageSize);
return sql + " LIMIT #{offset}, #{limit}";
final int safePageSize = requirePositiveInt(pageSize, "pageSize");
params.put("offset", (safePageNum - 1) * safePageSize);
params.put("limit", safePageSize);
return sql + " LIMIT #{offset}, #{limit}";
return sql + " LIMIT #{offset}, #{limit}";
}

return sql.toString();
return sql + " LIMIT #{offset}, #{limit}";
}

return sql.toString();
…deql-scanning

# Conflicts:
#	app/src/main/java/com/tinyengine/it/task/DatabaseCleanupService.java
#	base/src/main/java/com/tinyengine/it/common/utils/SqlIdentifierValidator.java
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants