quser in HsqlClient class

[teddyngibm]

Hi. A recent SAST scan result from AppScan picked up a security vulnerability from the below line in the HsqlClient class. Is there a reason why quser is hardcoded and not passed in as a parameter?

public Connection getConnection() throws Exception {
	return DriverManager.getConnection("jdbc:hsqldb:mem:test", "quser", "");
}

[OlafurTorfi]

I'm not sure if there is a good reason, but hsql is only used to create an in-memory database for testing, and this has always worked for us.