Add fix for SQL injection.

[policy/engine.git] / ONAP-REST / src / main / java / org / onap / policy / rest / dao / CommonClassDao.java

diff --git a/ONAP-REST/src/main/java/org/onap/policy/rest/dao/CommonClassDao.java b/ONAP-REST/src/main/java/org/onap/policy/rest/dao/CommonClassDao.java
index c486f53..4d0fd40 100644 (file)
--- a/ONAP-REST/src/main/java/org/onap/policy/rest/dao/CommonClassDao.java
+++ b/ONAP-REST/src/main/java/org/onap/policy/rest/dao/CommonClassDao.java
@@ -7,9 +7,9 @@
  * Licensed under the Apache License, Version 2.0 (the "License");
  * you may not use this file except in compliance with the License.
  * You may obtain a copy of the License at
- * 
+ *
  *      http://www.apache.org/licenses/LICENSE-2.0
- * 
+ *
  * Unless required by applicable law or agreed to in writing, software
  * distributed under the License is distributed on an "AS IS" BASIS,
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
@@ -23,6 +23,7 @@ package org.onap.policy.rest.dao;
 import java.util.List;
 
 import org.onap.policy.rest.jpa.PolicyRoles;
+import javax.script.SimpleBindings;
 
 public interface CommonClassDao {
 
@@ -32,26 +33,26 @@ public interface CommonClassDao {
        List<String> getDataByColumn(@SuppressWarnings("rawtypes") Class className, String columnName);
        List<Object> checkDuplicateEntry(String value, String columnName,  @SuppressWarnings("rawtypes") Class className);
        Object getEntityItem(@SuppressWarnings("rawtypes") Class className, String columnName, String key);
-       List<Object>  getDataByQuery(String query);
+       List<Object>  getDataByQuery(String query, SimpleBindings params);
        List<Object>  getMultipleDataOnAddingConjunction(@SuppressWarnings("rawtypes") Class className, String columnName, List<String> data);
        void save(Object entity);
        void delete(Object entity);
        void update(Object entity);
        void updateQuery(String query);
-       
+
        //Group Policy Scope
        List<Object> checkExistingGroupListforUpdate(String groupListValue, String groupNameValue);
-       
-       
+
+
        //Roles
        List<PolicyRoles> getUserRoles();
-       
-       
+
+
        //ClosedLoops
        void updateClAlarms(String clName, String alarms);
        void updateClYaml(String clName, String yaml);
        void deleteAll();
-        
-       
-       
+
+
+
 }