[DERBY-4654] Restriction.toSQL() doesn't escape special characters

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 10.6.1.0
• Fix Version/s: 10.6.2.1, 10.7.1.1
• Component/s: SQL
• Assignee: Knut Anders Hatlen
• Reporter: Knut Anders Hatlen
• Created: 12/May/10 10:27
• Updated: 29/Nov/10 14:20
• Resolved: 14/May/10 09:01

Description

org.apache.derby.vti.Restriction.toSQL() adds double quotes around column names, but it does not escape the special characters (like double quotes) in the column names, so the returned string may not be valid SQL. This could cause problems when using the restriction to generate a query against an external database.

Restriction.doubleQuote() should use IdUtil.normalToDelimited() to get proper quoting of the names.