[ https://issues.apache.org/jira/browse/JENA-1497?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rob Vesse resolved JENA-1497. ----------------------------- Resolution: Fixed Fix Version/s: Jena 3.7.0 Fixed for the 3.7.0 release > ParameterizedSparqlString detects delimiters incorrectly > -------------------------------------------------------- > > Key: JENA-1497 > URL: https://issues.apache.org/jira/browse/JENA-1497 > Project: Apache Jena > Issue Type: Bug > Components: ARQ > Affects Versions: Jena 3.6.0 > Reporter: Rob Vesse > Assignee: Rob Vesse > Priority: Major > Fix For: Jena 3.7.0 > > > As reported on the mailing list - > [https://lists.apache.org/thread.html/3855aa8046cfea61433042655144f071c56baa7c5d61a78544730455@%3Cusers.jena.apache.org%3E|https://lists.apache.org/thread.html/3855aa8046cfea61433042655144f071c56baa7c5d61a78544730455@%3Cusers.jena.apache.org%3E] > Investigation shows that the delimiter parsing logic has some flaws that > causes it to do the wrong thing resulting in the possibility of incorrect > detection of injection attacks leading to some valid SPARQL strings being > rejected when attempting to inject parameters. -- This message was sent by Atlassian JIRA (v7.6.3#76005)