aboutcode-org / aboutcode-org/scancode-analyzer
Write safer SQL Queries
Aperta
- Lingua principale
- Python
- Stelle
- 4
- Fork
- 4
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
Write better (safer) functions to prevent SQLi
It is generally considered bad practice to write SQL statements as such without _preparing_ them first (See: [this](https://bobby-tables.com/python))
https://github.com/nexB/scancode-analyzer/blob/813732ace5f0cb9647fe1c8ff504a4d30a1c67ac/etc/load_scan_into_dataframe/postgres.py#L59
Maybe, the Queries can be written using placeholders so that the database can fill in the data values properly and safely.
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.