hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Address review comments

Browse Source
This commit is contained in:
Alex Ford
2021-06-24 12:24:15 +01:00
parent bc5a1b86ff
commit d62f4f5bd4
4 changed files with 45 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ql/test/query-tests/security/cwe-089/ActiveRecordInjection.rb
View File

@@ -44,11 +44,11 @@ class BarController < ApplicationController
def some_other_request_handler
ps = params
uid = ps[:id]
uidEq = "= #{uid}"
# DELETE FROM "users" WHERE (id = #{uid})
User.delete_all("id = " + uid)
User.delete_all("id " + uidEq)
end
def sanitized_paths