Files
codeql/go/ql/test/experimental/CWE-400/DatabaseCallInLoop.go
2026-06-11 07:15:54 +02:00

14 lines
279 B
Go

package main
import "gorm.io/gorm"
func getUsers(db *gorm.DB, names []string) []User {
res := make([]User, 0, len(names))
for _, name := range names {
var user User
db.Where("name = ?", name).First(&user) // $ Alert
res = append(res, user)
} // $ Source
return res
}