Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-platform Commit: 1b1323227ec114f663d28517c20c29aca912afd3 https://github.com/xwiki/xwiki-platform/commit/1b1323227ec114f663d28517c20c2... Author: Vincent Massol <[email protected]> Date: 2026-07-05 (Sun, 05 Jul 2026) Changed paths: M xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/XWikiHibernateStore.java Log Message: ----------- [Misc] Suppress false-positive java:S2077 SQL injection warnings in XWikiHibernateStore The schema/user names used in the CREATE/DROP SCHEMA/USER DDL statements are escaped as quoted SQL identifiers (dialect quoting with internal-quote doubling) via HibernateAdapter#escapeDatabaseName. DDL statements cannot use bind parameters for identifiers, so identifier quoting is the correct protection against SQL injection. Suppress the rule on the two enclosing methods with an explanatory comment as per the XWiki SonarQube convention. To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-platform/settings/notifications