A type-safe embedding of SQL into Java using the extensible compiler framework J%. (April 2015)

• Record Type: Journal Article
• Authors: Karakoidas, Vassilios; Mitropoulos, Dimitris; Louridas, Panagiotis; Spinellis, Diomidis
• Is Part Of: Computer languages, systems & structures. Volume 41(2015)
• Page Start: 1
• Page End: 20
• Publication Date: 2015-04
• Subjects: Domain-specific languages -- Programming languages; Programming languages (Electronic computers) -- Periodicals; Computer networks -- Periodicals; Computer architecture -- Periodicals; Computer systems -- Periodicals; Langage de programmation; Réseau d'ordinateurs; Architecture d'ordinateur; Périodique électronique (Descripteur de forme); Ressource Internet (Descripteur de forme); 005.13
• DOI: 10.1016/j.cl.2015.01.001
• Languages: English
• ISSNs: 1477-8424

Abstract

Abstract: J% is an extension of the Java programming language that efficiently supports the integration of domain-specific languages. In particular, J% allows the embedding of domain-specific language code into Java programs in a syntax-checked and type-safe manner. This paper presents J%׳s support for thesql language. J% checks the syntax and semantics ofsql statements at compile-time. It supports query validation against a database schema or through execution to a live database server. The J% compiler generates code that uses standardjdbc api calls, enhancing runtime efficiency and security againstsql injection attacks. Abstract : Highlights: The SQL queries are syntactically checked. Optionally the SQL queries can be validated against a specified SQL database schema. Each SQL query can be separately configured with different compile-time features. The integration between the Java and SQL is type-safe. The compiler automatically generates secure code against SQL injection attacks.