apache/gravitino

[Improvement] Use SQL prepared statements in JdbcDatabaseOperations.java and PostgreSqlSchemaOperations.java

Open

#8,017 opened on Aug 11, 2025

View on GitHub
 (6 comments) (0 reactions) (0 assignees)Java (887 forks)auto 404
good first issueimprovement

Repository metrics

Stars
 (3,058 stars)
PR merge metrics
 (PR metrics pending)

Description

What would you like to be improved?

In the exist method the SQL string can be changed to use safer prepared statements.

How should we improve?

generateDatabaseExistSql woudl need to change as well.

Contributor guide

Research direction
Inspect the generateDatabaseExistSql method in JdbcDatabaseOperations and PostgreSqlSchemaOperations, then modify the exist method to use PreparedStatement with parameters instead of string concatenation.
Tech stack
javasqlpostgresql
Domain
backenddatabasesecurity
Issue type
Refactor
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
JavaJDBCSQL
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
75