mirror of
https://github.com/github/codeql.git
synced 2026-04-28 02:05:14 +02:00
docs: rename ql-training-rst > ql-training
This commit is contained in:
@@ -0,0 +1,12 @@
|
||||
import java
|
||||
|
||||
predicate isStringConcat(AddExpr ae) {
|
||||
ae.getType() instanceof TypeString
|
||||
}
|
||||
|
||||
from Method m, MethodAccess ma
|
||||
where
|
||||
m.getName().matches("sparql%Query") and
|
||||
ma.getMethod() = m and
|
||||
isStringConcat(ma.getArgument(0))
|
||||
select ma, "SPARQL query vulnerable to injection."
|
||||
Reference in New Issue
Block a user