R510 – EVAL statements tainted with user input and can pose a security issues (WMB)

EVAL statements tainted with user input and can pose a security issues (WMB)

EVAL statements can present a security issue. EVAL statements can also have performance issues as per IBM Best Practices.

DECLARE TempSQL CHARACTER;
SET TempSQL = ‘DELETE * FROM ‘;
SET OutputRoot.XMLNS.Data.Result[] = EVAL(TempSQL || InputRoot.XMLNSC.Details.Stuff.TargetTable);