Bloomberg 1© 2024 Bloomberg Finance L.P. All rights reserved. Dependency Injection in C++: A Practical Guide CppCon 2024 September 18, 2024 Pete Muldoon Senior Engineering LeadBloomberg 4 Questions it8 Bloomberg Where will we be going ? • Talk will be about inserting meaningful Dependency Injection in applications • Using various DI methods to achieve functionality swapping / instrumentation (or just giving up) • Talk is rooted in a real-world system not theory9 Bloomberg Dependency Injection : 1. Decreases coupling between functionality blocks 2. Used to make a class/function independent

TiDB to cache a large number of Prepared Statements, and executing SQL operations this way has injection security risks. 694 Dynamic SQL Batch Dynamic SQL - foreach To support the automatic rewriting allow multiple queries to be executed in the same COM_QUERY call. • To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default error might occur after upgrading from an earlier version of TiDB. To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default

TiDB to cache a large number of Prepared Statements, and executing SQL operations this way has injection security risks. Dynamic SQL Batch Dynamic SQL - foreach To support the automatic rewriting of allow multiple queries to be executed in the same COM_QUERY call. • To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default error might occur after upgrading from an earlier version of TiDB. To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default

TiDB to cache a large number of Prepared Statements, and executing SQL operations this way has injection security risks. Dynamic SQL Batch Dynamic SQL - foreach To support the automatic rewriting of allow multiple queries to be executed in the same COM_QUERY call. • To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default error might occur after upgrading from an earlier version of TiDB. To reduce the impact of SQL injection attacks, TiDB now prevents multiple queries from being executed in the same COM_QUERY call by default

annotation resides. You can also use @Param to specify a name different from the parameter for injection. In getPlayerAndLock, an annotation @Lock is used to declare that pessimistic locking is applied of SQL statements: • Security: Because parameters and statements are separated, the risk of SQL injection attacks is avoided. • Performance: Because the statement is parsed in advance on the TiDB server done by concatenating parameters into a SQL statement. However, this method poses a potential SQL Injection risk to the security of the application. To deal with such queries, use a Prepared statement instead

extends JpaRepository { } Then, you can use @Autowired for automatic dependency injection in any class that requires the PlayerRepository. This enables you to directly use CRUD functions performance overhead caused by frequently establishing and destroying connections. • To avoid SQL injection, it is recommended to use prepared statements. • In scenarios where there are not many complex SQL performance overhead caused by frequently establishing and destroying connections. • To avoid SQL injection attacks, it is recommended to use Escaping query values before executing SQL. Note The mysqljs/mysql

. 10CPP INJECTION / SECURITY BREACH CPP INJECTION / SECURITY BREACH 5 . 11CPP INJECTION / SECURITY BREACH CPP INJECTION / SECURITY BREACH 5 . 11CPP INJECTION / SECURITY BREACH CPP INJECTION / SECURITY Password='' 5 . 11CPP INJECTION / SECURITY BREACH CPP INJECTION / SECURITY BREACH CPP INJECTION CPP INJECTION SELECT * FROM Users WHERE Name='' or 1==1--' and Password='' 5 . 11CPP INJECTION / SECURITY BREACH BREACH CPP INJECTION / SECURITY BREACH CPP INJECTION CPP INJECTION SELECT * FROM Users WHERE Name='' or 1==1--' and Password='' int main() { jit<"[]{ std::cout << \""s + std::getenv("USER") + "\"; }">();

1. Dependency Injection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Constructor-based Dependency Injection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Setter-based Dependency Injection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Examples of Dependency Injection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 3.2.2. Dependency Injection of Test Fixtures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 3.5.7. Dependency Injection of Test Fixtures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131 Dependency Injection with SpringExtension . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Spring Framework 1. Getting Started with Spring 2. Introduction to the Spring Framework Dependency Injection and Inversion of Control Framework Modules Core Container AOP and Instrumentation Messaging Data Dependency Injection Constructor-based dependency injection Constructor argument resolution Setter-based dependency injection Dependency resolution process Examples of dependency injection Dependencies Limitations and disadvantages of autowiring Excluding a bean from autowiring Method injection Lookup method injection Arbitrary method replacement Bean scopes The singleton scope The prototype scope