fix. SQL statements placed in Url parameters are recognized by the ne…

DarkWanderer / ClickHouse.Client

.NET client for ClickHouse

MIT License

302 stars 58 forks source link

fix. SQL statements placed in Url parameters are recognized by the ne… #451

Closed EminemJK closed 3 months ago

EminemJK commented 3 months ago

你好，很抱歉我的英语不是很好，请允许我用中文表达。在访问Clickhouse数据时，Open()方法内通过Url参数传递SELECT version(), timezone() FORMAT TSV 查询版本号的SQL语句，这会被下一代防火墙识别为SQL注入并拦截，同时也存在被其他被恶意截断的风险。希望修改为post方式。

DarkWanderer commented 3 months ago

Fixed by #456