org.geotools.jdbc
Class EscapeSql
Object
EscapeSql
public class EscapeSql
- extends Object
Perform basic SQL validation on input string. This is to allow safe encoding
of parameters that must contain quotes, while still protecting users from SQL
injection.
We prevent SQL from breaking out of quotes by replacing any quotes in input
stream with double quotes. Backslashes are too risky to allow so are removed
completely
Methods inherited from class Object |
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
EscapeSql
public EscapeSql()
escapeSql
public static String escapeSql(String str)
Copyright © 1996-2014 Geotools. All Rights Reserved.