gosec: p_sql.go: G202 (CWE-89): SQL string concatenation

phires / go-guerrilla

MIT License

112 stars 18 forks source link

gosec: p_sql.go: G202 (CWE-89): SQL string concatenation #11

Closed phires closed 5 months ago

phires commented 1 year ago

[/Users/Philipp.Resch/dev/go-guerrilla/backends/p_sql.go:95] - G202 (CWE-89): SQL string concatenation (Confidence: HIGH, Severity: MEDIUM)
    94:         // do we have permission to access the table?
  > 95:         _, err = db.Query("SELECT mail_id FROM " + s.config.Table + " LIMIT 1")
    96:         if err != nil {

phires commented 5 months ago

fixed by PR #35