aboutcode-org / aboutcode-org/scancode-analyzer
Write safer SQL Queries
Abierto
- Lenguaje dominante
- Python
- Estrellas
- 4
- Forks
- 4
- Métricas de merge de PR
- Sin PR fusionados en 30 d
Descripción
Write better (safer) functions to prevent SQLi
It is generally considered bad practice to write SQL statements as such without _preparing_ them first (See: [this](https://bobby-tables.com/python))
https://github.com/nexB/scancode-analyzer/blob/813732ace5f0cb9647fe1c8ff504a4d30a1c67ac/etc/load_scan_into_dataframe/postgres.py#L59
Maybe, the Queries can be written using placeholders so that the database can fill in the data values properly and safely.
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.