Document how to avoid SQL injection with Dapper on bobby-tables.com
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 18.4k
- Forks
- 3.7k
- Avg merge
- 5h 8m
- Merged PRs (30d)
- 1
Description
bobby-tables.com, a website devoted to avoiding SQL injection on various platforms, has a page on Dapper.
The page only has some minimal examples. Perhaps it might be a good idea for someone more familiar with the Dapper API to expand the text and examples?
At minimum, I think there ought to be a comprehensive list of Dapper methods which take raw SQL, and are thus potentially vulnerable to SQL injection if parameters aren't used.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the existing Dapper page on bobby-tables.com and review the Dapper API methods that accept raw SQL. Document the relevant methods and expand the SQL-injection guidance with examples; done means the page has a comprehensive method list and clearer parameter-use examples.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp, sql
- Domain
- documentation, security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100