mirror of
https://github.com/github/codeql.git
synced 2026-03-06 23:56:48 +01:00
11 lines
282 B
Plaintext
11 lines
282 B
Plaintext
import java
|
|
|
|
class StringConcat extends AddExpr {
|
|
StringConcat() { getType() instanceof TypeString }
|
|
}
|
|
|
|
from MethodAccess ma
|
|
where
|
|
ma.getMethod().getName().matches("sparql%Query") and
|
|
ma.getArgument(0) instanceof StringConcat
|
|
select ma, "SPARQL query vulnerable to injection." |