[Owasp-leaders] SimpleJDBCCall

Matt Konda matt.konda at owasp.org
Tue Jan 12 21:34:45 UTC 2016


Not always.

https://docs.spring.io/spring/docs/current/javadoc-api/org/springframework/jdbc/core/simple/SimpleJdbcCall.html

https://docs.spring.io/spring/docs/current/javadoc-api/org/springframework/jdbc/core/JdbcTemplate.html#execute-java.lang.String-

If it uses some of the richer methods, it can be.

Matt


On Mon, Jan 11, 2016 at 8:36 AM, Talal Basha <talal.basha at owasp.org> wrote:

> Hello Leaders,
> Regarding the class SimpleJDBCCall in Spring framework, does it provide
> the same protection against SQLInjection as PreparedStatement?
>
> regards,
> Talal.
>
> _______________________________________________
> OWASP-Leaders mailing list
> OWASP-Leaders at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-leaders
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20160112/6188ae30/attachment.html>


More information about the OWASP-Leaders mailing list