This is a performance testing framework for Spark SQL in Apache Spark 2.2+. The framework contains twelve benchmarks that can be executed in local mode. They are organized into three classes and ...

Root cause: user input is concatenated directly into a SQL string, and the only mitigation is a keyword denylist. Denylists are inherently incomplete — this challenge is a direct demonstration of that ...