aboutcode-org / aboutcode-org/scancode-analyzer
Write safer SQL Queries
Ouverte
- Langage dominant
- Python
- Étoiles
- 4
- Forks
- 4
- Métriques de merge des PR
- Aucune PR mergée en 30 j
Description
Write better (safer) functions to prevent SQLi
It is generally considered bad practice to write SQL statements as such without _preparing_ them first (See: [this](https://bobby-tables.com/python))
https://github.com/nexB/scancode-analyzer/blob/813732ace5f0cb9647fe1c8ff504a4d30a1c67ac/etc/load_scan_into_dataframe/postgres.py#L59
Maybe, the Queries can be written using placeholders so that the database can fill in the data values properly and safely.
Guide de contribution
Aucun guide de contribution indexé pour ce dépôt
Évaluation
Cette issue n'a pas encore été évaluée.