This is an automated email from the ASF dual-hosted git repository.
nic pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kylin.git
The following commit(s) were added to refs/heads/master by this push:
new 43b248d Prevent uncontrolled data used in path expression
43b248d is described below
commit 43b248d807cea23c648b8cc730d94901f3635d42
Author: nichunen <[email protected]>
AuthorDate: Sat Jan 18 22:45:04 2020 +0800
Prevent uncontrolled data used in path expression
---
.../src/main/java/org/apache/kylin/metadata/TableMetadataManager.java | 1 +
1 file changed, 1 insertion(+)
diff --git
a/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
b/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
index 457c046..ce3017f 100644
---
a/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
+++
b/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
@@ -484,6 +484,7 @@ public class TableMetadataManager {
public void removeExternalFilter(String name) throws IOException {
try (AutoLock lock = extFilterMapLock.lockForWrite()) {
+ name = name.replaceAll("[./]", "");
extFilterCrud.delete(name);
}
}