opened
skjolber
username_0
**Summary:** 

Manual construction of queries adding strings together is security hole

**Steps to reproduce:** 

See all createQuery(..) method calls.

**Expected behavior:** 

Use builder to add parameters. 

**Observed behavior:** 

String appending

**Platform:** 

Java
SQL injection
issue
created
barbeau
username_1
@username_0 Thanks for flagging this!
comment
created
barbeau
username_1
@username_0 https://github.com/CUTR-at-USF/gtfs-realtime-validator/pull/324 should fix this if you want to have a look.  I'm going to test a bit before merging, any other eyes on this are welcome.
comment
closed
barbeau
username_1
issue