Branch: refs/heads/misc-sonar-s2077-hibernate-ddl Home: https://github.com/xwiki/xwiki-platform Commit: cb0f02ee5aab06d86acf763d215f31036b7442cc https://github.com/xwiki/xwiki-platform/commit/cb0f02ee5aab06d86acf763d215f3... Author: Vincent Massol <[email protected]> Date: 2026-07-05 (Sun, 05 Jul 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/XWikiHibernateStore.java Log Message: ----------- [Misc] Suppress false-positive java:S2077 SQL injection warnings in XWikiHibernateStore The schema/user names used in the CREATE/DROP SCHEMA/USER DDL statements are escaped as quoted SQL identifiers (dialect quoting with internal-quote doubling) via HibernateAdapter#escapeDatabaseName. DDL statements cannot use bind parameters for identifiers, so identifier quoting is the correct protection against SQL injection. Suppress the rule on the two enclosing methods with an explanatory comment as per the XWiki SonarQube convention. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications