Saifulhuq01 opened a new pull request, #5417:
URL: https://github.com/apache/fineract/pull/5417

   ## Description
   Refactored `EmailReadPlatformServiceImpl.java` to replace legacy SQL string 
concatenation with JDBC Prepared Statements.
   
   This change prevents potential SQL injection vulnerabilities by using `?` 
placeholders and passing parameters dynamically via `JdbcTemplate`.
   
   Resolves FINERACT-2461.
   Also related to FINERACT-2459.
   
   ## Changes
   * Refactored queries in `retrieveAllPending`, `retrieveAllSent`, and other 
read methods to use `?` placeholders.
   * Implemented `List<Object>` to pass parameters dynamically.
   * Applied Spotless formatting.
   
   ## Checklist
   * [x] Commit message follows guidelines
   * [x] Coding conventions followed
   * [x] Build is passing


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to