/** * <ol> * <li>Check for injection attack in property strings. <li>The field list * may not contain nulls. * </ol> */ protected List<Field> checkAndCleanFields(List<Field> fields) { if (fields == null) return null; for (Field field : fields) { if (field == null) { throw new IllegalArgumentException("The search contains a null field."); } if (field.getProperty() != null && field.getOperator() != Field.OP_CUSTOM) securityCheckProperty(field.getProperty()); } return fields; }
if (field.getOperator() == Field.OP_PROPERTY) { fieldProps.add(field.getProperty() + ".");
if (fields != null) { for (Field field : fields) { switch (field.getOperator()) { case Field.OP_AVG: case Field.OP_COUNT:
if (field.getOperator() == Field.OP_CUSTOM) { switch (field.getOperator()) { case Field.OP_AVG: sb.append("avg(");