search

johnsaigle / scary-strings

Collection of wordlists containing dangerous function calls in many languages
GNU General Public License v3.0
22 stars 4 forks source link

Add Go SQL functions #34

Open johnsaigle opened 2 years ago

johnsaigle commented 2 years ago

Extract SQL function calls from popular Go libraries, like https://github.com/stripe-archive/safesql#how-does-it-work but without the SAST component

Packages listed in the above link: https://pkg.go.dev/database/sql#DB https://github.com/jinzhu/gorm https://github.com/jmoiron/sqlx

Any others? That repo has not been updated for years so maybe there are new popular packages that people are using.

johnsaigle commented 1 year ago

The state-changing functions from the main sql package added in 91d9564c8a74fcc2b10451c79511dc9ed50ba282