Merge pull request #1773 from sleuthkit/release-4.8.0

Merge release-4.8.0 branch into develop branch

bindings/java/src/org/sleuthkit/datamodel/CaseDbAccessManager.java

@@ -696,17 +696,14 @@ private void validateIndexName(String indexName) throws TskCoreException {
 	/**
 	 * Validates given SQL string.
 	 * 
-	 * Specifically, it ensurer the SQL  doesn't have a ";" 
+	 * @param sql The SQL to validate.
 	 * 
-	 * @param sql
-	 * 
-	 * @throws TskCoreException 
+	 * @throws TskCoreException Thrown if the SQL is not valid.
 	 */
 	private void validateSQL(String sql) throws TskCoreException {
-
-		if (sql.contains(";")) {
-			throw new TskCoreException("SQL unsafe to execute, it contains a ; ");
-		}
+		/*
+		 * TODO (JIRA-5950): Need SQL injection defense in CaseDbAccessManager 
+		 */
 	}
 
 }