mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
a83bb39d0f
As discussed in a meeting today, this will end up presenting an query suite that's easier to use for customers. Since https://github.com/github/codeql/pull/6589 has JUST been merged, if we get this change in fast enough, no end-user will ever have run `py/sqlalchemy-textclause-injection` as part of LGTM.com or Code Scanning.
3 lines
210 B
Markdown
3 lines
210 B
Markdown
lgtm,codescanning
|
|
* Expanded the query _SQL query built from user-controlled sources_ (`py/sql-injection`) to alert if user-input is added to a TextClause from SQLAlchemy, since that can lead to SQL injection.
|