search

nccgroup / sobelow

Security-focused static analysis for the Phoenix Framework
Apache License 2.0
1.66k stars 92 forks source link

Update Sobelow.SQL.Query to test for both query() and query!(), similar to Sobelow.Traversal.FileModule (#153) #155

Closed iarekk closed 6 months ago

iarekk commented 6 months ago

Add support for both query() and query!() in the Sobelow.SQL.Query module.

This fixes #153.

Going with the Option 2 suggested by @houllette:

Change the functionality of the entire detection to be more similar to that of something like our File traversal rule which supports detecting a plethora of sub-

This is probably the more accurate approach to better support long term if more similar functions are discovered needing support. e.g. query_many