[
https://issues.apache.org/jira/browse/IGNITE-16936?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17533030#comment-17533030
]
Luchnikov Alexander commented on IGNITE-16936:
----------------------------------------------
[~nizhikov]
It would be more correct - Invalid DML syntax error message *may* contain
sensitive information.
If you execute an sql-query, for example, through sqlline, with incorrect
syntax and conditional in which there will be a card number.
*selec* * from cards where pan='1234567890'.
We will see the message in the log
{code:java}
Caused by: org.h2.jdbc.JdbcSQLException: Syntax error in SQL statement
"SELEC[*] * FROM CARDS WHERE PAN='1234567890'"; expected "SELECT, SET,
SAVEPOINT, SCRIPT, SHUTDOWN, SHOW, {"
Syntax error in SQL statement "SELEC[*] * FROM CARDS WHERE PAN='1234567890' ";
expected "SELECT, SET, SAVEPOINT, SCRIPT, SHUTDOWN, SHOW, {"; SQL statement:
selec * from cards where pan='1234567890' [42001-197]
{code}
I can't offer a correct solution yet.
> Incorrect DML syntax error message contains sensitive information
> -----------------------------------------------------------------
>
> Key: IGNITE-16936
> URL: https://issues.apache.org/jira/browse/IGNITE-16936
> Project: Ignite
> Issue Type: Bug
> Reporter: Luchnikov Alexander
> Priority: Major
> Labels: ise
> Attachments:
> IGNITE-16936_Ignore_IGNITE_TO_STRING_INCLUDE_SENSITIVE_in_wrong_syntax_DML_error_message_-.patch
>
>
> Incorrect DML syntax error message contains sensitive information.
> Regardless of the value of IGNITE_TO_STRING_INCLUDE_SENSITIVE.
> Reproducer
> [^IGNITE-16936_Ignore_IGNITE_TO_STRING_INCLUDE_SENSITIVE_in_wrong_syntax_DML_error_message_-.patch]
> show what SENSITIVE contains in message.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
