[GROOVY-4328] Sql.withBatch is not escaping SQL variables

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 1.7.3
• Component/s: SQL processing
• Environment: Windows 7, Java 1.6.0_20
• Assignee: Paul King
• Reporter: Behrang Saeedzadeh
• Created: 26/Jul/10 00:46
• Updated: 28/May/14 03:03
• Resolved: 27/May/14 00:12

Description

I wanted to replace a loop of sql.update calls like this:

sql.execute("update Foo set Baz = ${baz} where Bar = ${bar}")

With

sql.withBatch(200, { stmt ->
stmt.addBatch("update Foo set Baz = ${bar} where Bar = ${bar}")
})

But looks like Sql.withBatch is not escaping variables like Sql.execute and Sql.update do
and the script freaks out as soon as one of the bar variables contains a quote character.