Skip to content

JDBC SQL statement interceptor #376

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 22 commits into from
Jul 31, 2024
Merged
Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
9217422
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 16, 2024
8d41375
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 22, 2024
4473a3d
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 22, 2024
3659653
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 22, 2024
f77f0a1
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 22, 2024
1d9d312
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 22, 2024
5df9e00
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
494d184
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
e4a6137
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
5bf180b
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
9c9c8cc
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
3a2f79d
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 23, 2024
c6ca01f
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 24, 2024
2217ded
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 24, 2024
2c70645
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 24, 2024
f8b8c89
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 24, 2024
777eb5e
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 25, 2024
a2f3885
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 26, 2024
f46ca46
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 29, 2024
7f444ac
igned-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 29, 2024
56a026d
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 30, 2024
e1c4157
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
ejannett Jul 31, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Signed-off-by: Emmanuel Jannetti <emmanuel.jannetti@oracle.com>
remove gradle wrapper scripts
introduce uuid to be sure logs records are unique per web page
  • Loading branch information
ejannett committed Jul 26, 2024
commit a2f38857d8cf63a41559a2e8143c7919d61331c8
8 changes: 5 additions & 3 deletions java/jdbc/statement-interceptor/demo-app/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -51,6 +51,8 @@ The interceptor rules are defined in

## build

Be sure that you use gradle 8.5 or above.

We require the following dependency to be available

>dependencies {
Expand All @@ -68,7 +70,7 @@ By default, the following environment variables are used
You can change this behavior by setting correct values in oracle-pooled-ds.properties file

You can then start the application by running
> ./gradlew bootRun
> gradle bootRun

Once the application is started, open a web browser and go to
http://localhost:8080/
Expand All @@ -86,7 +88,7 @@ You can issue some search that will be intercepted by the listener

#### SQL injection example
An example is a search like
>_' or 'a'='a_.
>_' or 'a'='a_

When the interceptor is not enabled you will see that this search return all
employees including the ones that are not supposed to be visible
Expand All @@ -107,4 +109,4 @@ By issuing "BabEmployee" as search criteria you will see how security log record
### From intelliJ
_Run_ > _Run statement-interceptor-demo [bootRun]_
### From command line
#./gradlew bootRun
#gradle bootRun

This file was deleted.

256 changes: 0 additions & 256 deletions java/jdbc/statement-interceptor/demo-app/gradlew

This file was deleted.

Loading