Files
codeql/rust/ql/src/queries/security/CWE-089/SqlInjectionGood.rs
2024-11-19 11:09:42 +00:00

6 lines
227 B
Rust

// with SQLx
let prepared_query = "SELECT * FROM people WHERE firstname=?";
let _ = sqlx::query(prepared_query_1).bind(&remote_controlled_string).fetch_all(&mut conn).await?; // GOOD (prepared statement with bound parameter)