Datanucleus + PostgreSQL 没有转义反斜杠

Question

我试图找出 Datanucleus 中的查询出错的地方（由 Postgres DB 支持）。当表达式包含反斜杠时，即使是简单的查询也会失败。但是，我的印象是 JDO/Datanucleus 应该抽象出手动转义参数到查询的需要，就像 PreparedStatement 对纯 JDBC 所做的那样。

这是一个独立的例子：

package somepkg;

import org.datanucleus.api.jdo.JDOPersistenceManager;

import javax.jdo.*;
import javax.jdo.annotations.*;
import java.util.*;

@PersistenceCapable
public final class MyPersistentObject {

    @Persistent(valueStrategy = IdGeneratorStrategy.INCREMENT)
    @PrimaryKey
    private long id;

    @Persistent
    private String value;

    public MyPersistentObject(String value) {
        this.value = value;
    }

    public static void main(String... args) {
        JDOPersistenceManager pm = (JDOPersistenceManager)
                JDOHelper.getPersistenceManagerFactory(datanucleusProperties())
                        .getPersistenceManager();

        //seems to be a problem with values that contain a backspace
        String value = "\\";

        //store (works fine)
        Transaction tx = pm.currentTransaction();
        tx.begin();
        MyPersistentObject objectToStore = new MyPersistentObject(value);
        pm.makePersistent(objectToStore);
        tx.commit();

        //fetch (fails)
        MyPersistentObject fetchedObject = pm
                .newTypesafeQuery(MyPersistentObject.class)
                .filter(QMyPersistentObject.candidate().value.eq(value))
                .executeUnique();

        System.out.println(fetchedObject);
    }

    private static Map<String, String> datanucleusProperties() {
        Map<String, String> datanucleusProperties = new HashMap<String, String>();

        datanucleusProperties.put("javax.jdo.option.ConnectionDriverName", "org.postgresql.Driver");
        datanucleusProperties.put("javax.jdo.option.ConnectionURL", "jdbc:postgresql:test");
        datanucleusProperties.put("javax.jdo.option.ConnectionUserName", "postgres");
        datanucleusProperties.put("javax.jdo.option.ConnectionPassword", "");
        datanucleusProperties.put("datanucleus.autoCreateSchema", "true");
        datanucleusProperties.put("datanucleus.validateTables", "false");
        datanucleusProperties.put("datanucleus.validateConstraints", "false");
        return datanucleusProperties;
    }
}

QMyPersistentObject 是通过运行注释处理器生成的。失败并显示以下消息：

Exception in thread "main" javax.jdo.JDOException: Exception thrown when executing query
at org.datanucleus.api.jdo.NucleusJDOHelper.getJDOExceptionForNucleusException(NucleusJDOHelper.java:567)
at org.datanucleus.api.jdo.query.JDOTypesafeQuery.executeInternalQuery(JDOTypesafeQuery.java:946)
at org.datanucleus.api.jdo.query.JDOTypesafeQuery.executeUnique(JDOTypesafeQuery.java:770)
at somepkg.MyPersistentObject.main(MyPersistentObject.java:52)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)
NestedThrowablesStackTrace:
org.postgresql.util.PSQLException: ERROR: unterminated quoted string at or near "'\'"
Position: 128
at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2102)
at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1835)
at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:257)
at org.postgresql.jdbc2.AbstractJdbc2Statement.execute(AbstractJdbc2Statement.java:500)
at org.postgresql.jdbc2.AbstractJdbc2Statement.executeWithFlags(AbstractJdbc2Statement.java:388)
at org.postgresql.jdbc2.AbstractJdbc2Statement.executeQuery(AbstractJdbc2Statement.java:273)
at org.datanucleus.store.rdbms.datasource.dbcp.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:96)
at org.datanucleus.store.rdbms.datasource.dbcp.DelegatingPreparedStatement.executeQuery(DelegatingPreparedStatement.java:96)
at org.datanucleus.store.rdbms.SQLController.executeStatementQuery(SQLController.java:465)
at org.datanucleus.store.rdbms.query.JDOQLQuery.performExecute(JDOQLQuery.java:625)
at org.datanucleus.store.query.Query.executeQuery(Query.java:1789)
at org.datanucleus.store.query.Query.executeWithArray(Query.java:1665)
at org.datanucleus.store.query.Query.execute(Query.java:1638)
at org.datanucleus.api.jdo.query.JDOTypesafeQuery.executeInternalQuery(JDOTypesafeQuery.java:936)
at org.datanucleus.api.jdo.query.JDOTypesafeQuery.executeUnique(JDOTypesafeQuery.java:770)
at somepkg.MyPersistentObject.main(MyPersistentObject.java:52)

是否有人对 JDO 或 Datanucleus 有足够的了解，知道我在查询时是否需要采取额外的步骤来逃避内容？如果不是（正如我假设的那样），我想这是 Datanucleus 或 Postgres JDBC 驱动程序中的错误？

Answer 1

为什么不把一个参数放在那里（而不是硬编码值，然后得到后续问题），然后将它作为一个?传递给JDBC驱动程序。即 JDBC 总是建议处理此类事情的方式