Files
codeql/rust/ql/test/query-tests/security/CWE-089/SqlSinks.ql

20 lines
538 B
Plaintext

import rust
import codeql.rust.security.SqlInjectionExtensions
import utils.test.InlineExpectationsTest
module SqlSinksTest implements TestSig {
string getARelevantTag() { result = "sql-sink" }
predicate hasActualResult(Location location, string element, string tag, string value) {
exists(SqlInjection::Sink sink |
location = sink.getLocation() and
location.getFile().getBaseName() != "" and
element = sink.toString() and
tag = "sql-sink" and
value = ""
)
}
}
import MakeTest<SqlSinksTest>