lvyanquan commented on code in PR #4123:
URL: https://github.com/apache/flink-cdc/pull/4123#discussion_r2357938192
##########
flink-cdc-connect/flink-cdc-pipeline-connectors/flink-cdc-pipeline-connector-oceanbase/src/test/java/org/apache/flink/cdc/connectors/oceanbase/sink/OceanBaseMetadataApplierTest.java:
##########
@@ -145,6 +145,30 @@ void testCreateTable() {
.build();
assertThat(actualTable).isEqualTo(expectTable);
+
+ tableId = TableId.tableId("nonexistent' OR '1'='1", "tabl1");
+ metadataApplier.applySchemaChange(new CreateTableEvent(tableId,
schema));
+ actualTable =
+ catalog.getTable(tableId.getSchemaName(),
tableId.getTableName()).orElse(null);
+ assertThat(actualTable).isNotNull();
Review Comment:
They are valid database/table names, but it may be truncated to the wrong
database/table names if we don't process correctly to avoid SQL injection.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@flink.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
