aboutcode-org / aboutcode-org/scancode-analyzer
Write safer SQL Queries
未关闭
- 主要语言
- Python
- 星标
- 4
- 派生
- 4
- PR 合并指标
- 30 天内没有已合并 PR
描述
Write better (safer) functions to prevent SQLi
It is generally considered bad practice to write SQL statements as such without _preparing_ them first (See: [this](https://bobby-tables.com/python))
https://github.com/nexB/scancode-analyzer/blob/813732ace5f0cb9647fe1c8ff504a4d30a1c67ac/etc/load_scan_into_dataframe/postgres.py#L59
Maybe, the Queries can be written using placeholders so that the database can fill in the data values properly and safely.
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。