mirror of
https://github.com/hashicorp/vault.git
synced 2026-05-04 17:24:55 -04:00
* VAULT-43691 - Fix SQL injection risk in HANA and Redshift DeleteUser revoke paths (#13741) HANA now safely quotes usernames as identifiers, and Redshift safely quotes usernames as string literals before constructing revoke/delete SQL. Added regression tests to ensure crafted usernames cannot inject additional SQL and that only the targeted user is deleted. |
||
|---|---|---|
| .. | ||
| redshift-database-plugin | ||
| redshift.go | ||
| redshift_test.go | ||