[#SES-343] REGEX operations should allow binding pattern - openRDF.org Issue Tracker

Issue Details [XML]

Key:	SES-343
Type:	Improvement
Status:	Closed
Resolution:	Fixed
Priority:	Major
Assignee:	Unassigned
Reporter:	James Leigh
Votes:	0
Watchers:	0

Operations

If you were logged in you would be able to see more operations.

Sesame

REGEX operations should allow binding pattern

Created: 25/Feb/07 03:45 PM Updated: 20/Mar/08 08:29 PM

Component/s:

Query Model

Affects Version/s:

2.0-beta1, 2.0-beta2, 2.0-beta3, 2.0-beta4, 2.0-beta5, 2.0-beta6

Fix Version/s:

2.0-rc1

Issue Links:

Dependency

This issue is a dependency for:
	~~SES-421~~ update SPARQL support to the CR of 14...

Description

Currently the regex() and LIKE operation of SPARQL and SeRQL require their pattern to be embedded in the query string. This can open the door for query-injection, a common problem in SQL applications on the web. Instead these should accept a pattern variable and allow its value to be binded through the Query interface before execution. This change should be done so not to cause a performance penalty for pattern compilation.

All

Comments

Change History

Sort Order:

Change by Jeen Broekstra [19/Mar/07 03:32 PM]
Field	Original Value	New Value
Fix Version/s		2.0 [ 10080 ]

Change by Arjohn Kampman [06/Jul/07 11:11 AM]
Field	Original Value	New Value
Fix Version/s		2.0-beta6 [ 10270 ]
Fix Version/s	2.0 [ 10080 ]
Affects Version/s		2.0-beta5 [ 10260 ]
Affects Version/s		2.0-beta4 [ 10250 ]
Affects Version/s		2.0-beta3 [ 10241 ]
Affects Version/s		2.0-beta2 [ 10230 ]

Change by Arjohn Kampman [06/Jul/07 11:17 AM]
Field	Original Value	New Value
Link		This issue is a dependency for ~~SES-421~~ [ ~~SES-421~~ ]

Change by Arjohn Kampman [12/Oct/07 02:30 PM]
Field	Original Value	New Value
Fix Version/s		2.0-beta7 [ 10281 ]
Fix Version/s	2.0-beta6 [ 10270 ]
Affects Version/s		2.0-beta6 [ 10270 ]

Comment by James Leigh [01/Nov/07 09:46 PM]

LIKE will stay as it is for now, but SPARQL allows this pattern to come from an arbitrary value expression and should be changed.

Change by James Leigh [01/Nov/07 09:46 PM]
Field	Original Value	New Value
Summary	REGEX and LIKE operations should allow binding pattern	REGEX operations should allow binding pattern

Comment by James Leigh [01/Nov/07 10:03 PM]

Revision: 3438

Change by James Leigh [01/Nov/07 10:03 PM]
Field	Original Value	New Value
Status	Open [ 1 ]	Resolved [ 5 ]
Resolution		Fixed [ 1 ]

Change by Arjohn Kampman [20/Mar/08 08:29 PM]
Field	Original Value	New Value
Status	Resolved [ 5 ]	Closed [ 6 ]