Here is the patch that only parses once. =/ Thanks Dmitry.
I have to say that I agree with Darin. If it's just an exploit, itdoesn't really belong in the JDBC driver.
Cheers,
Kim