Files
codeql/go/ql/test/query-tests/Security/CWE-798/HardcodedCredentials.go
2026-06-11 07:15:54 +02:00

21 lines
313 B
Go

package main
import (
"database/sql"
"fmt"
)
const (
user = "dbuser"
password = "s3cretp4ssword" // $ Alert
)
func connect() *sql.DB {
connStr := fmt.Sprintf("postgres://%s:%s@localhost/pqgotest", user, password)
db, err := sql.Open("postgres", connStr)
if err != nil {
return nil
}
return db
}