mirror of
https://github.com/github/codeql.git
synced 2026-03-06 15:49:08 +01:00
8 lines
289 B
Plaintext
8 lines
289 B
Plaintext
import java
|
|
import semmle.code.java.dataflow.DataFlow::DataFlow
|
|
|
|
from MethodAccess ma, StringConcat stringConcat
|
|
where
|
|
ma.getMethod().getName().matches("sparql%Query") and
|
|
localFlow(exprNode(stringConcat), exprNode(ma.getArgument(0)))
|
|
select ma, "SPARQL query vulnerable to injection." |