#1594 Sensitive information may be leaked in condlPrint of org.hsqldb.cmdline.SqlFile

[Xiaoqin Fu]

In org.hsqldb.cmdline.SqlFile,
public String streamToString(InputStream is, final String cs)
throws IOException {
while (bytesread < ba.length &&
(retval = is.read(
ba, bytesread, ba.length - bytesread)) > 0) {
bytesread += retval;
}
}
......
private void condlPrint(final String s, final boolean printHtml) {
if ((printHtml && !htmlMode) || (htmlMode && !printHtml)) return;

    if (shared.psStd != null) shared.psStd.print(s);

    if (pwQuery != null) {
        pwQuery.print(s);
        pwQuery.flush();
    }
}

The sensitive information (String s) may be leaked.
We may be able to add control on it.

[Xiaoqin Fu]

Should I open a PR for it?

[Fred Toussi]

This ticket is not clear.