mirror of
https://github.com/github/codeql.git
synced 2025-12-29 23:26:34 +01:00
11 lines
279 B
Plaintext
11 lines
279 B
Plaintext
import java
|
|
|
|
predicate isStringConcat(AddExpr ae) { ae.getType() instanceof TypeString }
|
|
|
|
from Method m, MethodCall ma
|
|
where
|
|
m.getName().matches("sparql%Query") and
|
|
ma.getMethod() = m and
|
|
isStringConcat(ma.getArgument(0))
|
|
select ma, "SPARQL query vulnerable to injection."
|