luocooong commented on a change in pull request #2493:
URL: https://github.com/apache/drill/pull/2493#discussion_r834253110
##########
File path:
metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
##########
@@ -117,6 +117,8 @@ private HikariDataSource dataSource(DrillConfig config) {
private void initTables(DataSource dataSource) {
try (Connection connection = dataSource.getConnection()) {
JdbcConnection jdbcConnection = new JdbcConnection(connection);
+ // TODO Replace the following steps with new function once this issue is
resolved.
Review comment:
Thanks, let's hold-off the merge progress. Actually, I think this is a
security issue with only a 50% probability, but in the latest responses from
the reporting group, they point out that it can be exploited and attacked.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
