Castor Bad Practices: Unspecified Query Mode

ABSTRACT

該 Castor 查詢未明確定義查詢模式。

EXPLANATION

默認情況下，Castor 以共享模式執行查詢。由于共享模式允許讀取訪問和寫入訪問，因此該查詢需要采取何種操作并不清楚。如果要在只讀上下文中使用該對象，則共享訪問會增加不必要的性能負擔。

例 1：以下示例未指定查詢模式。

results = query.execute();    //missing query mode

REFERENCES

[1] Standards Mapping - Security Technical Implementation Guide Version 3 - (STIG 3) APP3500 CAT II

[2] Standards Mapping - Security Technical Implementation Guide Version 3.4 - (STIG 3.4) APP3500 CAT II

[3] ExoLab Group Castor JDO - Best practice

[4] Standards Mapping - Common Weakness Enumeration - (CWE) CWE ID 265

[5] ExoLab Group, Intalio Inc., and Contributors Database (Castor JavaDoc)

[6] Standards Mapping - Payment Card Industry Data Security Standard Version 1.2 - (PCI 1.2) Requirement 7.1.1

[7] Standards Mapping - Payment Card Industry Data Security Standard Version 2.0 - (PCI 2.0) Requirement 7.1.1