简体   繁体   中英

Google datastore security with objectify

I am experimenting with objectify and GAE (Java, standard environment) to store some data in Google's datastore. When not using objectify prepared queries are mentioned in the docs in order to save and retrieve data from the datastore. See: GAE docs

Are there any vulnerabilities similar to SQL injection when using Objectify like this:

List<Car> cars = ofy().load().type(Car.class).filter("year >", 1999).list();

Or like this:

ofy().save().entity(thing1).now();
Thing th = ofy().load().key(thingKey).now();

Thanks in advance

不,因为没有查询语言,所以没有等效的SQL注入。

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM