Skip to content

Added name check to avoid directory attack for object type#16719

Closed
Caideyipi wants to merge 114 commits intoapache:new_object_typefrom
Caideyipi:tag_name_check
Closed

Added name check to avoid directory attack for object type#16719
Caideyipi wants to merge 114 commits intoapache:new_object_typefrom
Caideyipi:tag_name_check

Conversation

@Caideyipi
Copy link
Collaborator

@Caideyipi Caideyipi commented Nov 7, 2025

Description

As the title said.

This PR has:

  • been self-reviewed.
    • concurrent read
    • concurrent write
    • concurrent read and write
  • added documentation for new or modified features or behaviors.
  • added Javadocs for most classes and all non-trivial methods.
  • added or updated version, license, or notice information
  • added comments explaining the "why" and the intent of the code wherever would not be obvious
    for an unfamiliar reader.
  • added unit tests or modified existing tests to cover new code paths, ensuring the threshold
    for code coverage.
  • added integration tests.
  • been tested in a test IoTDB cluster.
Key changed/added classes (or packages if there are too many classes) in this PR

Caideyipi and others added 30 commits November 6, 2025 09:37
@Caideyipi
partial
c135133
@Caideyipi
fix
b8bfec9
@Caideyipi
part
9dd36ee
@Caideyipi
createOrUpdate
ffd1760
@Caideyipi
partial
3f3af1c
@Caideyipi
fix
7a74ed6
@Caideyipi
partial
1c546b2
@Caideyipi
part
39a3455
@Caideyipi
may_main_final
6c78ea7
@Caideyipi
bug-fix
b7d4960
@Caideyipi
fix
035746a
@HTHou
[To force_ci/object_type] Support insert object by sql & add IT (apac…
391429b 
…he#16683)
@Caideyipi
Update StatementAnalyzer.java
af2ce13
@Caideyipi
fix
1542fa4
@Caideyipi
removal
7e79670
@Caideyipi
object
38e5b83
@Caideyipi
fix-add-test
fddb70a
@Caideyipi
Merge branch 'force_ci/object_type' of https://github.com/apache/iotdb …
5c4f79d 
…into tag_name_check
@Caideyipi
bug-fix
3cb4adc
@Caideyipi
spotless
ec441b0
@Caideyipi
change-back
c8dc111
@Caideyipi
fix
bd5a8c5
@JackieTien97
Fix wrong push limit down to AggTableScanNode (apache#16696)
0fc8e17 
(cherry picked from commit 8420bea)
@CRZbulabula @JackieTien97
More robust IoTDBRegionReconstructForIoTV1IT (apache#16697)
4dbb3c6 
(cherry picked from commit b6c6c7a)
@Caideyipi @JackieTien97
Implemented the alter encoding compression function for tree model (a…
1bb15b2 
…pache#16672)

* ifpermitted

* reconstruct

* final-prev

* complete-dn

* partial

* very-partial

* fix

* partial-set

* fix

* test

* fix

* shop

* fix

* some

* partial

* bishop

* fix

* fix

* grasia

* fix

* main

* fix

* partial

* fix

* minor

* fix

* fix

* spotless

* test

* part

* fix

* bug-fix

* fix

* Revert "fix"

This reverts commit da7a080.

* Reapply "fix"

This reverts commit 27de58a.

(cherry picked from commit f096b82)
@LJW21-02 @JackieTien97
Support SSL-related parameters and interactive password input in expo…
0971b8f 
…rt/import tools (apache#16698)

* Add ssl param + Support interactive pw input

* fix spotless

* Changed params processing order: ts > tpw > pw

(cherry picked from commit ababbf3)
@alpass163 @JackieTien97
implement the intersect (distinct | all ) for table model (apache#16700)
0e15626 
(cherry picked from commit 4ebb89b)
@shuwenwei @JackieTien97
Fix the error message of ConfigExecution (apache#16680)
96d4eae 
(cherry picked from commit c406a81)
@Caideyipi @JackieTien97
Fixed the null error message of fetch schema failed when the regions …
5d9baf5 
…is removing (apache#16713)

(cherry picked from commit 9ae8233)
@Caideyipi @JackieTien97
Pipe: Fixed the NPE of commit interval (apache#16714)
d0de0a6 
* fix

* fix

(cherry picked from commit a9ba724)
JackieTien97 and others added 27 commits November 27, 2025 08:24
@JackieTien97
Add IT for session and jdbc query
7a62fad
@Caideyipi @JackieTien97
Pipe: Fixed the check for no permission 2 (apache#16804)
db058ab 
* edge

* sonar

* emperor-cloth

* emperor-patch

(cherry picked from commit 448592e)
@HTHou @JackieTien97
Update ratis-thirdparty-misc version to 1.0.10 (apache#16807)
e55b423 
(cherry picked from commit 0431d5a)
@Sh-Zh-7 @JackieTien97
Fix window partiton across two TsBlock bugs (apache#16809)
cee173b 
(cherry picked from commit 100c5a3)
@Caideyipi @JackieTien97
may_fix (apache#16814)
d961572 
(cherry picked from commit d997408)
@Caideyipi @JackieTien97
Fixed the bug of 305 error for unsupported table opreations apache#16816
32e1642 


(cherry picked from commit fb899b1)
@Caideyipi @JackieTien97
Fixed the calculation error of schema cache (apache#16818)
426a964 
* ff

* back-roll

(cherry picked from commit ddcc646)
@Caideyipi @JackieTien97
Fixed the concurrency issue of region migrate and load (apache#16796)
a280635 
* rq

* gra

* fix

* fix

* coverage

* fix

* fix

* fix

(cherry picked from commit 03bc260)
@shuwenwei @JackieTien97
Add 'show available urls' (apache#16441)
ec7d627 
(cherry picked from commit c4114b9)
@Caideyipi @JackieTien97
Added back the mis-deleted "()" in last cache (apache#16824)
d33169d 
(cherry picked from commit 19ebbe3)
@Caideyipi @JackieTien97
Reduced the auth log when paths are too many (apache#16825)
78fcd84 
* partial

* test

(cherry picked from commit 8cb4b9b)
@luoluoyuyu @JackieTien97
perf: Optimize wide table write performance (apache#16699)
b6d21c6 
* Refactor TableSchema handling to reduce conversion overhead

* update

* update

* update

* update

* update

* update

* update

* update

* fix

* update semanticCheck

* fix: cache table schema by database and table

* spotless

* update

* update

* update

* update

* update

* fix InsertStatementTest

* update

* update

* update

* update

* Revert "update"

This reverts commit 7eb3b3a.

* ignore object type

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* update

* fix it

* fix it

* fix

* fix

* fix

* fix

* fix

* fix

* update

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

(cherry picked from commit 23be220)
@alpass163 @JackieTien97
implement the except (distinct | all ) for table model apache#16760
8c75110 
(cherry picked from commit 85b8f16)
@alpass163 @JackieTien97
added support for Blob objects to the length() function, allowing for…
53c730c 
… calculating the byte size for Blob inputs (apache#16170)

(cherry picked from commit 85281fa)
@alpass163 @JackieTien97
implement intersect and except related optimization rule: MergeInters…
a113051 
…ect, MergeExcept, RemoveEmptyIntersectBranchs, EvaluateEmptyIntersect, PruneIntersectSourceColumns, PruneExceptSourceColmns (apache#16761)

(cherry picked from commit bd813d8)
@JackieTien97
Fix compile error in DataRegion
7249a52
@Caideyipi
fix
173263e
@Caideyipi
remove-check
57efae2
@Caideyipi
check_write
1638240
@Caideyipi
defense
6c86380
@Caideyipi
Merge branch 'force_ci/object_type' of https://github.com/apache/iotdb …
ffe1fb1 
…into tag_name_check
@Caideyipi
unwebbed
4f23e5e
@Caideyipi
clean
f34ae76
@Caideyipi
c
bab9a80
@Caideyipi
remove-useless-check
c82dfcb
@Caideyipi
may-comp
a6cc072
@Caideyipi
qp
f6027d0
@Caideyipi Caideyipi closed this Dec 10, 2025
@Caideyipi Caideyipi deleted the tag_name_check branch December 10, 2025 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.