Spring/spring-data-neo4j
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

refactor: Use SchemaNames to escape and sanitze labels used in SpEL.

Browse Source 
Signed-off-by: Michael Simons <michael@simons.ac>
This commit is contained in:
Michael Simons
2025-01-27 11:40:23 +01:00
parent ccd9679675
commit e9922eb63a
1 changed files with 1 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/java/org/springframework/data/neo4j/repository/query/Neo4jSpelSupport.java
View File

@@ -18,10 +18,8 @@ package org.springframework.data.neo4j.repository.query;
import java.io.Serial;
import java.util.Collection;
import java.util.LinkedHashMap;
import java.util.Locale;
import java.util.Map;
import java.util.concurrent.locks.StampedLock;
import java.util.regex.Matcher;
import java.util.regex.Pattern;
import java.util.stream.Collectors;
@@ -248,10 +246,7 @@ public final class Neo4jSpelSupport {
.getRequiredPersistentEntity(metadata.getJavaType());
evalContext.getEvaluationContext().setVariable(ENTITY_NAME, requiredPersistentEntity.getStaticLabels()
.stream()
.map(l -> {
Matcher matcher = LABEL_AND_TYPE_QUOTATION.matcher(l);
return String.format(Locale.ENGLISH, "`%s`", matcher.replaceAll("``"));
})
.map(l -> SchemaNames.sanitize(l, true).orElseThrow())
.collect(Collectors.joining(":")));
query = potentiallyQuoteExpressionsParameter(query);