This is an automated email from the ASF dual-hosted git repository.

nic pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kylin.git


The following commit(s) were added to refs/heads/master by this push:
     new 43b248d  Prevent uncontrolled data used in path expression
43b248d is described below

commit 43b248d807cea23c648b8cc730d94901f3635d42
Author: nichunen <[email protected]>
AuthorDate: Sat Jan 18 22:45:04 2020 +0800

    Prevent uncontrolled data used in path expression
---
 .../src/main/java/org/apache/kylin/metadata/TableMetadataManager.java    | 1 +
 1 file changed, 1 insertion(+)

diff --git 
a/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
 
b/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
index 457c046..ce3017f 100644
--- 
a/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
+++ 
b/core-metadata/src/main/java/org/apache/kylin/metadata/TableMetadataManager.java
@@ -484,6 +484,7 @@ public class TableMetadataManager {
 
     public void removeExternalFilter(String name) throws IOException {
         try (AutoLock lock = extFilterMapLock.lockForWrite()) {
+            name = name.replaceAll("[./]", "");
             extFilterCrud.delete(name);
         }
     }

Reply via email to