Files
codeql/go/ql/test/query-tests/Security/CWE-089/SqlInjectionGood.go
2022-05-20 10:07:19 -07:00

12 lines
226 B
Go

package main
import (
"database/sql"
"net/http"
)
func handlerGood(db *sql.DB, req *http.Request) {
q := "SELECT ITEM,PRICE FROM PRODUCT WHERE ITEM_CATEGORY='?' ORDER BY PRICE"
db.Query(q, req.URL.Query()["category"])
}