Insecure Deserialization

Dataease is vulnerable to Insecure Deserialization. The vulnerability is due not considering URL encoding while blacklisting certain user-controllable jdbc parameters in the JDBC connection url while calling methods getExtraParams() and URLDecoder.decode(getExtraParams()) within ``Mysql.java`. An attacker can exploit this to bypass the blacklist filter and execute arbitrary code.