From 386f566086d4080ea6975449dc06eecb6df974bc Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 08:19:07 +0900 Subject: [PATCH 1/2] test(cdc): replay secure DDL default RED on live develop --- .../XtrmetlPropertiesSecurityDefaultTest.java | 24 +++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java diff --git a/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java b/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java new file mode 100644 index 00000000..73849a9f --- /dev/null +++ b/cdc-service/src/test/java/com/xtrmetl/cdc/config/XtrmetlPropertiesSecurityDefaultTest.java @@ -0,0 +1,24 @@ +package com.xtrmetl.cdc.config; + +import org.junit.jupiter.api.Test; + +import static org.junit.jupiter.api.Assertions.assertEquals; +import static org.junit.jupiter.api.Assertions.assertFalse; + +/** + * Guards the secure standalone default exposed by the CDC replica configuration object. + */ +class XtrmetlPropertiesSecurityDefaultTest { + + @Test + void replicaDdlRemainsDisabledAndUsesWhitelistValidationByDefault() { + XtrmetlProperties properties = new XtrmetlProperties(); + + assertFalse(properties.getReplica().isDdlEnabled(), "DDL replication must remain disabled by default"); + assertEquals( + "whitelist", + properties.getReplica().getDdlValidationMode(), + "the Java configuration object must match the deployable and metadata secure default" + ); + } +} From b6466d4577b204f30c31aa5834b96c64be17ede2 Mon Sep 17 00:00:00 2001 From: Seongho Bae Date: Wed, 12 Aug 2026 08:35:09 +0900 Subject: [PATCH 2/2] fix(cdc): secure DDL validation default --- .../src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java b/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java index f0db1b9c..067f5a70 100644 --- a/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java +++ b/cdc-service/src/main/java/com/xtrmetl/cdc/config/XtrmetlProperties.java @@ -105,7 +105,7 @@ public static class Replica { */ private String tables = "processed_data"; private boolean ddlEnabled = false; - private String ddlValidationMode = "none"; + private String ddlValidationMode = "whitelist"; private String ddlAllowedPrefixes = "CREATE TABLE,ALTER TABLE,CREATE INDEX"; private String ddlBlockedPrefixes = "DROP TABLE,DROP SCHEMA,DROP DATABASE,TRUNCATE"; private final Kafka kafka = new Kafka();