From e1076270d8b8944a3afc6fe08464d324c5d21448 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 00:48:51 +0900 Subject: [PATCH 1/2] test(cdc): reproduce secure DDL object default contract --- .../XtrmetlPropertiesSecurityDefaultTest.java | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java diff --git a/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java b/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java new file mode 100644 index 00000000..e7e3de4e --- /dev/null +++ b/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java @@ -0,0 +1,21 @@ +package com.xtrmetl.cdc.config; + +import org.junit.jupiter.api.Test; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertFalse; + +class XtrmetlPropertiesSecurityDefaultTest { + + @Test + void replicaDdlRemainsDisabledAndUsesWhitelistValidationByDefault() { + XtrmetlProperties properties = new XtrmetlProperties(); + + assertFalse(properties.getReplica().isDdlEnabled(), "DDL replication must remain disabled by default"); + assertEquals( + "whitelist", + properties.getReplica().getDdlValidationMode(), + "the Java configuration object must match the deployable and metadata secure default" + ); + } +} From 785dbef9132a2649a17c3565c49f85ee5e24d619 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 01:01:39 +0900 Subject: [PATCH 2/2] fix(cdc): align secure DDL validation default --- .../src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java b/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java index f0db1b9c..067f5a70 100644 --- a/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java +++ b/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java @@ -105,7 +105,7 @@ public static class Replica { */ private String tables = "processed_data"; private boolean ddlEnabled = false; - private String ddlValidationMode = "none"; + private String ddlValidationMode = "whitelist"; private String ddlAllowedPrefixes = "CREATE TABLE,ALTER TABLE,CREATE INDEX"; private String ddlBlockedPrefixes = "DROP TABLE,DROP SCHEMA,DROP DATABASE,TRUNCATE"; private final Kafka kafka = new Kafka();