This is an automated email from the ASF dual-hosted git repository.
diwu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/doris.git
The following commit(s) were added to refs/heads/master by this push:
new 3ba3690f93 [Fix](Http-API)Check and replace user sensitive characters
(#22148)
3ba3690f93 is described below
commit 3ba3690f93d3beaa2374bc702972425405eaa937
Author: Calvin Kirs <[email protected]>
AuthorDate: Mon Jul 24 18:21:42 2023 +0800
[Fix](Http-API)Check and replace user sensitive characters (#22148)
---
.../java/org/apache/doris/httpv2/rest/StmtExecutionAction.java | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git
a/fe/fe-core/src/main/java/org/apache/doris/httpv2/rest/StmtExecutionAction.java
b/fe/fe-core/src/main/java/org/apache/doris/httpv2/rest/StmtExecutionAction.java
index 8175762ba8..7bfc0eb418 100644
---
a/fe/fe-core/src/main/java/org/apache/doris/httpv2/rest/StmtExecutionAction.java
+++
b/fe/fe-core/src/main/java/org/apache/doris/httpv2/rest/StmtExecutionAction.java
@@ -41,6 +41,7 @@ import com.google.common.collect.Maps;
import com.google.common.collect.Sets;
import com.google.gson.Gson;
import com.google.gson.reflect.TypeToken;
+import org.apache.commons.lang3.StringUtils;
import org.apache.logging.log4j.LogManager;
import org.apache.logging.log4j.Logger;
import org.jetbrains.annotations.NotNull;
@@ -68,6 +69,9 @@ import javax.servlet.http.HttpServletResponse;
public class StmtExecutionAction extends RestBaseController {
private static final Logger LOG =
LogManager.getLogger(StmtExecutionAction.class);
private static StatementSubmitter stmtSubmitter = new StatementSubmitter();
+ private static final String NEW_LINE_PATTERN = "[\n\r]";
+
+ private static final String NEW_LINE_REPLACEMENT = " ";
private static final long DEFAULT_ROW_LIMIT = 1000;
private static final long MAX_ROW_LIMIT = 10000;
@@ -140,8 +144,10 @@ public class StmtExecutionAction extends
RestBaseController {
if (ns.equalsIgnoreCase(SystemInfoService.DEFAULT_CLUSTER)) {
ns = InternalCatalog.INTERNAL_CATALOG_NAME;
}
+ if (StringUtils.isNotBlank(sql)) {
+ sql = sql.replaceAll(NEW_LINE_PATTERN, NEW_LINE_REPLACEMENT);
+ }
LOG.info("sql: {}", sql);
-
ConnectContext.get().changeDefaultCatalog(ns);
ConnectContext.get().setDatabase(getFullDbName(dbName));
return getSchema(sql);
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
