Add "slots" to sql fragments

[hechang27-sprt]

Borrowing from Vue template syntax:
Def:

<sql id="my-query">
SELECT 
<slot name="columns" />
FROM table1 JOIN table2 ON <slot name="join-cond">
<where>
AND <-- base condition 1 -->
AND <-- base condition 2 -->
<slot name="where-cond" />
</where>
ORDER BY <slot name="order-by">
</sql>

Usage:

<include refid="my-query">
<template #columns>table1.col1, col2, table2.*</template>
<template #join-cond>table1.id = table2.tbl1_key</template>
<template #order-by>table1.time DESC</template>
</include>

[hechang27-sprt]

To add to the necessity of adding such a feature, compared to ${} and property which is being way too powerful/dynamic, this syntax allow static injection of sql into <sql> fragment which reduces the attack surface of sql injection while aiding the development of static analysis tools for mybatis.

[harawata]

Hello @hechang27-sprt ,

Actually, the current <include> with properties is also static, meaning, the inclusions are resolved at the parsing phase, not at runtime.