hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 06:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add more methods from GORM as sinks

Browse Source 
Cf. https://gorm.io/docs/security.html
This commit is contained in:
Owen Mansel-Chan
2020-09-09 14:01:55 +01:00
parent 95c1f754c6
commit d807e8de75
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ql/src/semmle/go/frameworks/SQL.qll
View File

@@ -168,7 +168,8 @@ module SQL {
meth.hasQualifiedName(package, "DB", name) and
this = meth.getACall().getArgument(0) and
package in ["github.com/jinzhu/gorm", "github.com/go-gorm/gorm", "gorm.io/gorm"] and
name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having", "Joins"]
name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having",
"Joins", "Exec", "Distinct", "Pluck"]
)
}
}