mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
12 lines
282 B
Plaintext
12 lines
282 B
Plaintext
import java
|
|
|
|
predicate isStringConcat(AddExpr ae) {
|
|
ae.getType() instanceof TypeString
|
|
}
|
|
|
|
from Method m, MethodAccess ma
|
|
where
|
|
m.getName().matches("sparql%Query") and
|
|
ma.getMethod() = m and
|
|
isStringConcat(ma.getArgument(0))
|
|
select ma, "SPARQL query vulnerable to injection." |